--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cac6b8ee-b0bb-4b41-b889-f6c6d3dc3df4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cac6b8ee-b0bb-4b41-b889-f6c6d3dc3df4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49390","PortSpecifier":{"PortValue":49390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0bdb492-3564-4ae0-9e70-057272553dfc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-1aa2d9.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49390","PortSpecifier":{"PortValue":49390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453364,"nanos":422787109},"http":{"id":"d0bdb492-3564-4ae0-9e70-057272553dfc","method":"POST","headers":{":authority":"e2e-inf-a-1aa2d9.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"212f27c8f85dd754905e13484b5195a767ba014c7d3a70d139118171b2bcc948"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-1aa2d9.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-1aa2d9/test-model-1aa2d9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0bdb492-3564-4ae0-9e70-057272553dfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46478","PortSpecifier":{"PortValue":46478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e72925a-5911-4e29-84b3-2613c239ca98","method":"POST","path":"/ai-tenant-e2e-inf-b-c47ca8/test-model-c47ca8/v1/chat/completions","host":"e2e-inf-b-c47ca8.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:46478","PortSpecifier":{"PortValue":46478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.64:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453364,"nanos":458978309},"http":{"id":"5e72925a-5911-4e29-84b3-2613c239ca98","method":"POST","headers":{":authority":"e2e-inf-b-c47ca8.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-c47ca8/test-model-c47ca8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6VYMfctVCxCK3IDc_irMrihmIN96A12tvpkQs5sHXwEt0hz0LvKzqPrTGfFk"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-c47ca8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6VYMfctVCxCK3IDc_irMrihmIN96A12tvpkQs5sHXwEt0hz0LvKzqPrTGfFk\"}"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-c47ca8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-c47ca8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e0be02116f96b61d0bba730b2a7f857e85c1701f2dfc5be8c21f68b76bae606e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.64:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-c47ca8.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-c47ca8/test-model-c47ca8/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T19:42:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e72925a-5911-4e29-84b3-2613c239ca98","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"}
{"level":"error","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:43:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:43:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a"}
{"level":"info","ts":"2026-07-07T19:43:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec"}
{"level":"info","ts":"2026-07-07T19:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32fd61565235401a9303fcde5aa141e0a90f5200939c82f6efce2ec6aecb6a2d"}
{"level":"info","ts":"2026-07-07T19:43:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3801f6e8f68a36b8a7f3a654a5dd9829823c04030bc2d0d39c63b5c131702f24"}
{"level":"info","ts":"2026-07-07T19:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c05f6f58128b0180a69c83910fa759b4c07fd99be4ecf9fbcc4a5f891cef08a"}
{"level":"info","ts":"2026-07-07T19:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9ac9647263c72cf112357ec571156ddd4e1ec82db5143984783c8002c10b6fa"}
{"level":"info","ts":"2026-07-07T19:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9482e85132e2e4a1cec45d1efcdf5acbbdbd070353edbb6cd4f0b7d9f10379e1"}
{"level":"info","ts":"2026-07-07T19:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76dd48b1aefedebad9d4f0994c9522f09ef21c2845410966ea281bc3c846d58a"}
{"level":"info","ts":"2026-07-07T19:44:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf5df9688b58de782598eea5d15b9c89110decd02be6328e6b084b6eb794a8ec"}
{"level":"info","ts":"2026-07-07T19:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3dc95ec1dd2b3fa88f39214de3368facdd9df9392068d93713905e2063d6932"}
{"level":"info","ts":"2026-07-07T19:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bf41326947b1f25b9d4b7e50f57dd584624e3a7add5cdcad942e39227a044b7"}
{"level":"info","ts":"2026-07-07T19:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72cd16546aff079ff73a847fc26116f68cfa7518e0765c185fabab9b5d70a0a9"}
{"level":"info","ts":"2026-07-07T19:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33209737fc09adde1049a390450e98f21b2a827b78ea70ea61ae3b0767f0c312"}
{"level":"info","ts":"2026-07-07T19:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5294df18710e901c3ac5c9985d68efe9a1a52b9ea9264adabb1e54d3f15b531f"}
{"level":"info","ts":"2026-07-07T19:44:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c7c50ab3f3cafef5d1ef4a93db556e59a79171e6704d39e77ef63960e48c449"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0be02116f96b61d0bba730b2a7f857e85c1701f2dfc5be8c21f68b76bae606e"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fe305378cf47d75043edcb660810d08e33e4990da426eeb236075f02c90b407"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6e29e7758374d4c77500901def50f125ac7de6836320c42ba1b5f735bd189a2"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/118c65ba2d29a21427596958fe7d6266a92b2cab56ac5499340b00241d1923c8"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a94f25aba1cffae0a2439ffbcea0f12a06f5fe41c466ef203b966681616ca10"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5bfcbf817674f0f3d9346391e5b926144c2671fc94049b5c413b5ecf076e912"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2885f438db95261546f50a959c64bcc32d660b58b737b6c38957c6d1fecd426e"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a2d99aa96730105d69d9a41aafc374afd37875581b57a433313909d2c20ff37"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/492735e3274ded17e07b2c8132c3113e9766cd81c65e68a4843e3a0959a6665b"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f35e3c01f80141989e40451edbda7526f459dc5fdd723b7b9ad9a4aaa7d7073e"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f722d6352035caffe7b084aaaa547bf6fa0dafd4141f45de9a3d8e620df4e01c"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e9471476ece82d5cbad7d09194dc1b2285d905848bb0009217fb78d1693c587"}
{"level":"info","ts":"2026-07-07T19:44:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a2795a6da1884e303f466962f012cbc41984cdfb680c0a973c83271ceab5379"}
{"level":"info","ts":"2026-07-07T19:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04ac06c1ffee78b38d99ddeedc4e60b35c62b3ef0fe903c6b2abe9c3bde607fd"}
{"level":"info","ts":"2026-07-07T19:44:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/212f27c8f85dd754905e13484b5195a767ba014c7d3a70d139118171b2bcc948"}
{"level":"info","ts":"2026-07-07T19:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b77dd3678be054048346f0278f27d4d1c7f36d62f9829e3c183d98d9dc94861a"}
{"level":"info","ts":"2026-07-07T19:44:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85f78ea0fb0f0a3d0608b9f4e9764444ae81009ce03e9b7c4e7d7dc631b28413"}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d"}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d"}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d"}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93"}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93"}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93"}
{"level":"debug","ts":"2026-07-07T19:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"info","ts":"2026-07-07T19:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3557354ba7a2be4e7de224329255ee47349843e5036f7a51760dd5709a712c93"}
{"level":"info","ts":"2026-07-07T19:45:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db0b0f86250c010cee1504c27571fed8307f32f1c9d7f17fd5c8657a10fc4a6d"}
{"level":"info","ts":"2026-07-07T19:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaa82f4e253018c6a5efb067de3b4f508c6d4efe3ece3067574b616864ca43f5"}
{"level":"info","ts":"2026-07-07T19:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ad82590dc7aec6e3ba231aef67555078a54fec4c789e871963f6c1b3999546e"}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b"}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584"}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b"}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584"}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b"}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:47:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c"}
{"level":"info","ts":"2026-07-07T19:47:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54094","PortSpecifier":{"PortValue":54094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54094","PortSpecifier":{"PortValue":54094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453632,"nanos":564763674},"http":{"id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72b3ec03-5cd7-41b8-bf83-ca570ce87526","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb35441-4680-4e02-8510-471746a61b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42312","PortSpecifier":{"PortValue":42312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bb35441-4680-4e02-8510-471746a61b96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bb35441-4680-4e02-8510-471746a61b96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42312","PortSpecifier":{"PortValue":42312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453632,"nanos":624677532},"http":{"id":"1bb35441-4680-4e02-8510-471746a61b96","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1bb35441-4680-4e02-8510-471746a61b96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bb35441-4680-4e02-8510-471746a61b96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bb35441-4680-4e02-8510-471746a61b96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb35441-4680-4e02-8510-471746a61b96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bb35441-4680-4e02-8510-471746a61b96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55312","PortSpecifier":{"PortValue":55312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"172a562f-2b85-4770-b5c5-4c59e0adb152","method":"GET","path":"/maas-api/v1/api-keys/9cb73874-c127-4d77-85be-fbbb752ca7db","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55312","PortSpecifier":{"PortValue":55312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453632,"nanos":695383213},"http":{"id":"172a562f-2b85-4770-b5c5-4c59e0adb152","method":"GET","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9cb73874-c127-4d77-85be-fbbb752ca7db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9cb73874-c127-4d77-85be-fbbb752ca7db",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"172a562f-2b85-4770-b5c5-4c59e0adb152","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39486","PortSpecifier":{"PortValue":39486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","method":"GET","path":"/maas-api/v1/api-keys/07062f06-a62a-47c0-8565-17c9e64d61af","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:39486","PortSpecifier":{"PortValue":39486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453632,"nanos":728383915},"http":{"id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","method":"GET","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07062f06-a62a-47c0-8565-17c9e64d61af",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/07062f06-a62a-47c0-8565-17c9e64d61af",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be9e824d-7fd1-46ac-9e3b-2988e08fdb02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35736","PortSpecifier":{"PortValue":35736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb777176-dc1a-4e45-9f32-458ea1b55219","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35736","PortSpecifier":{"PortValue":35736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453649,"nanos":789752087},"http":{"id":"cb777176-dc1a-4e45-9f32-458ea1b55219","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb777176-dc1a-4e45-9f32-458ea1b55219","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60982","PortSpecifier":{"PortValue":60982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60982","PortSpecifier":{"PortValue":60982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453649,"nanos":824498620},"http":{"id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a69c313-435e-4ebe-9dde-e7677bc54e48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35744","PortSpecifier":{"PortValue":35744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35744","PortSpecifier":{"PortValue":35744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453649,"nanos":860692644},"http":{"id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","method":"GET","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BqUPf3bAYpgTWYIh_TNZctBhLJb5dzExDUzvlbPpVlfHdbB1Ykj8JAKGKOtw"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BqUPf3bAYpgTWYIh_TNZctBhLJb5dzExDUzvlbPpVlfHdbB1Ykj8JAKGKOtw\"}"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee60888c-b8d5-49a3-a6b0-74bffe65c31f","keyName":"e2e-auth-iso-a-71c54f","subscription":"e2e-auth-iso-b0b428","tenant":"e2e-shared-a-78237e","userId":"ee60888c-b8d5-49a3-a6b0-74bffe65c31f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b0b428"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744dae79-bdbe-4b2f-8a20-836cd12e0eea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56558","PortSpecifier":{"PortValue":56558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56558","PortSpecifier":{"PortValue":56558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453666,"nanos":960345755},"http":{"id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aea4584-5c5b-4408-9137-b4b23ccd410c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54782","PortSpecifier":{"PortValue":54782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54782","PortSpecifier":{"PortValue":54782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453666,"nanos":994688446},"http":{"id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c44b3cf-00d6-4cea-a11c-a0263df096c4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54798","PortSpecifier":{"PortValue":54798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54798","PortSpecifier":{"PortValue":54798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453667,"nanos":35787081},"http":{"id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","method":"GET","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NEOZOIfGUOAwWYfE_Z5KvZ4XHSHs0S7NHozUe4jlN2aHgYu2JYUAJo2LfZe4"}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NEOZOIfGUOAwWYfE_Z5KvZ4XHSHs0S7NHozUe4jlN2aHgYu2JYUAJo2LfZe4\"}"}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T19:47:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b04c8d78-8ffd-437c-9552-7478fb29c7d3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44954","PortSpecifier":{"PortValue":44954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"996aa37c-a329-42b5-8e50-ee1ea830a925","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44954","PortSpecifier":{"PortValue":44954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453684,"nanos":105752591},"http":{"id":"996aa37c-a329-42b5-8e50-ee1ea830a925","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996aa37c-a329-42b5-8e50-ee1ea830a925","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53376","PortSpecifier":{"PortValue":53376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df018828-cf6d-42bb-82cd-abc551cd12c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53376","PortSpecifier":{"PortValue":53376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453684,"nanos":140506775},"http":{"id":"df018828-cf6d-42bb-82cd-abc551cd12c7","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df018828-cf6d-42bb-82cd-abc551cd12c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2bf392b-47ac-45c9-917c-3387476f4c01","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44958","PortSpecifier":{"PortValue":44958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453684,"nanos":176067830},"http":{"id":"c2bf392b-47ac-45c9-917c-3387476f4c01","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2bf392b-47ac-45c9-917c-3387476f4c01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53386","PortSpecifier":{"PortValue":53386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:53386","PortSpecifier":{"PortValue":53386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453684,"nanos":211902712},"http":{"id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9479eea7-4682-41ec-bc35-a8aa54dfd6b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1453044-5029-419c-9e92-f811473c11d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1453044-5029-419c-9e92-f811473c11d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1453044-5029-419c-9e92-f811473c11d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453701,"nanos":295037842},"http":{"id":"a1453044-5029-419c-9e92-f811473c11d8","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1453044-5029-419c-9e92-f811473c11d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1453044-5029-419c-9e92-f811473c11d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1453044-5029-419c-9e92-f811473c11d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1453044-5029-419c-9e92-f811473c11d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1453044-5029-419c-9e92-f811473c11d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57774","PortSpecifier":{"PortValue":57774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57774","PortSpecifier":{"PortValue":57774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453701,"nanos":330630404},"http":{"id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47fa1e6a-ee19-4400-85be-4daa8b9cb22a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57790","PortSpecifier":{"PortValue":57790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","method":"GET","path":"/maas-api/v1/api-keys/3a475d02-c71b-4c06-9842-28a2e305cf9d","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57790","PortSpecifier":{"PortValue":57790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453701,"nanos":362474632},"http":{"id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","method":"GET","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a475d02-c71b-4c06-9842-28a2e305cf9d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a475d02-c71b-4c06-9842-28a2e305cf9d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4cb2a2b-6a4a-4455-8c0c-6093e2a33be5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35046","PortSpecifier":{"PortValue":35046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","method":"GET","path":"/maas-api/v1/api-keys/3a475d02-c71b-4c06-9842-28a2e305cf9d","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35046","PortSpecifier":{"PortValue":35046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453701,"nanos":393876780},"http":{"id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","method":"GET","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a475d02-c71b-4c06-9842-28a2e305cf9d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3a475d02-c71b-4c06-9842-28a2e305cf9d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22f6bcf0-d148-4c3d-8fc5-d578479d7365","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35186","PortSpecifier":{"PortValue":35186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f132855-c2d2-4e7d-a635-599de603b38d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35186","PortSpecifier":{"PortValue":35186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453718,"nanos":502775956},"http":{"id":"1f132855-c2d2-4e7d-a635-599de603b38d","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f132855-c2d2-4e7d-a635-599de603b38d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceb5fe18-e963-45cb-b703-e2e66c455571","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38494","PortSpecifier":{"PortValue":38494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453718,"nanos":539277561},"http":{"id":"ceb5fe18-e963-45cb-b703-e2e66c455571","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/auth-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceb5fe18-e963-45cb-b703-e2e66c455571","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35198","PortSpecifier":{"PortValue":35198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"948be45b-5eef-4cd2-b1a4-e265af626c12","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35198","PortSpecifier":{"PortValue":35198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453718,"nanos":572112732},"http":{"id":"948be45b-5eef-4cd2-b1a4-e265af626c12","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVtsZfxHS1BGyXIs_qGUeQapfzF9dzULsbb1MEXbLN9dflfkAZA8ji5jOinr"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVtsZfxHS1BGyXIs_qGUeQapfzF9dzULsbb1MEXbLN9dflfkAZA8ji5jOinr\"}"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b347d435-2c76-45a7-857b-7f92fbf34bf1","keyName":"e2e-auth-iso-a-f33466","subscription":"e2e-auth-iso-91bb01","tenant":"e2e-shared-a-78237e","userId":"b347d435-2c76-45a7-857b-7f92fbf34bf1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/auth-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-91bb01"}
{"level":"info","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:48:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"948be45b-5eef-4cd2-b1a4-e265af626c12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:48:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/035e64dc0d955feccb2be380e87f42971ae834a5d1b63bcce920258f2e475584"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46f442feb6b2a93ffa311b01321cc5ad971f0ec3b0e3501b285a8826109afe5b"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5946b774b4177de217e5bdb0e72e9035a4e7da8d7c66176fe908de31935b750"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d18a71a52c769beaa7477f07068d7c45b6c1abd6ffd138960267b795d3f000"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9da5d50be70190d4a0048a211e6e23acfd6bc3cfdc87aa69f77644a85b729f69"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6ee8dd8a396ead2d4a99506b00473cd0ab9f972bfea57c6c3cb8b7e02cfb255"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d083fee8bf321c4063398c3e8f59c70548b3057f352a596c8359522adda4ed4"}
{"level":"info","ts":"2026-07-07T19:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/624e716af6676340462d5a308bb208d60752615fdbe1972d7e517d3a4adf11a9"}
{"level":"info","ts":"2026-07-07T19:48:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67e47ee08cee6f419501fdc06cb51e655cead81ddf5196e85a2b250779fdbdfa"}
{"level":"info","ts":"2026-07-07T19:48:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37dc0b6b6430bac0b4890485d3ec6a0aade7b6e7c6759cf25c11b0ab113cb961"}
{"level":"info","ts":"2026-07-07T19:48:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f142089d84a0ee28bf54a4283b96f8ddf1e383123c8beb0c32e06c38561a25a"}
{"level":"info","ts":"2026-07-07T19:48:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0466c241f92209d2f8765c19eabeb691dd4f20c18e4231c5284786432bff7d09"}
{"level":"info","ts":"2026-07-07T19:48:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e25628d6bc7e19256040ea2164f29ce69078766984e8700a900573f2eec1464e"}
{"level":"info","ts":"2026-07-07T19:48:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e52997247b3a485b0039e2e8742b077c962e4a2d0b64cd8a23c9ccf686ebac7c"}
{"level":"info","ts":"2026-07-07T19:48:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc8a7949b487e2d608c31f27dfc9ab723d85395570a7d541be42361a29f5b85f"}
{"level":"info","ts":"2026-07-07T19:48:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e48c2e159945afcda744e71d9dd1ee8b8d9740e2213684d7afdace4e95650cb"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"info","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"}
{"level":"info","ts":"2026-07-07T19:49:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"}
{"level":"debug","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"}
{"level":"debug","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"}
{"level":"debug","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"error","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"debug","ts":"2026-07-07T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:49:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"debug","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"}
{"level":"info","ts":"2026-07-07T19:49:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44206","PortSpecifier":{"PortValue":44206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d59445b6-c274-4cac-a005-2853a0dda8da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44206","PortSpecifier":{"PortValue":44206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453799,"nanos":929297510},"http":{"id":"d59445b6-c274-4cac-a005-2853a0dda8da","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/sub-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d59445b6-c274-4cac-a005-2853a0dda8da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56616","PortSpecifier":{"PortValue":56616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56616","PortSpecifier":{"PortValue":56616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453799,"nanos":971764568},"http":{"id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/sub-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ae06a2-3ed2-4304-ad3a-6adf5b0265f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44222","PortSpecifier":{"PortValue":44222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44222","PortSpecifier":{"PortValue":44222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453800,"nanos":30731585},"http":{"id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","method":"GET","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TT5FyXr6T9QX4EOA_4UbrEI3592SGaVMVa8M8Wul0vQxbdYXbK7HXMhwnDth"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TT5FyXr6T9QX4EOA_4UbrEI3592SGaVMVa8M8Wul0vQxbdYXbK7HXMhwnDth\"}"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b260b251-ac24-41bc-84ba-d5b93b4601e1","keyName":"e2e-sub-iso-5381d6","subscription":"e2e-a-only-05ec0e","tenant":"e2e-shared-a-78237e","userId":"b260b251-ac24-41bc-84ba-d5b93b4601e1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/sub-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-05ec0e"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0f6f595-0b3d-4ee5-a758-30aaad5e9523","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56622","PortSpecifier":{"PortValue":56622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:56622","PortSpecifier":{"PortValue":56622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453800,"nanos":68943961},"http":{"id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","method":"GET","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JTxILzfZLotSZ7Vb_rdOAaknb1dtHYMRxxgJ0pJDKO5TCpdEu463VtwOJtZN"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JTxILzfZLotSZ7Vb_rdOAaknb1dtHYMRxxgJ0pJDKO5TCpdEu463VtwOJtZN\"}"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"494910d8-6948-4c23-9c9c-a87c2653cbbe","keyName":"e2e-sub-iso-539a2d","subscription":"e2e-b-only-05ec0e","tenant":"e2e-shared-b-0a6be4","userId":"494910d8-6948-4c23-9c9c-a87c2653cbbe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/sub-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-05ec0e"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"562fd6f3-a97a-4a13-81a9-d8947e523eda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55558","PortSpecifier":{"PortValue":55558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b19ff37c-f202-4ddd-8275-538128c2d66b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55558","PortSpecifier":{"PortValue":55558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453818,"nanos":574929501},"http":{"id":"b19ff37c-f202-4ddd-8275-538128c2d66b","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/sub-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b19ff37c-f202-4ddd-8275-538128c2d66b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fd091d7-af7f-4341-8427-1f6222300606","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34386","PortSpecifier":{"PortValue":34386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fd091d7-af7f-4341-8427-1f6222300606","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fd091d7-af7f-4341-8427-1f6222300606","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34386","PortSpecifier":{"PortValue":34386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453818,"nanos":610345069},"http":{"id":"5fd091d7-af7f-4341-8427-1f6222300606","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5fd091d7-af7f-4341-8427-1f6222300606","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fd091d7-af7f-4341-8427-1f6222300606","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/sub-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fd091d7-af7f-4341-8427-1f6222300606","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fd091d7-af7f-4341-8427-1f6222300606","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fd091d7-af7f-4341-8427-1f6222300606","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf297373-363d-4983-95f4-9255a10f434b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55574","PortSpecifier":{"PortValue":55574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf297373-363d-4983-95f4-9255a10f434b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf297373-363d-4983-95f4-9255a10f434b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55574","PortSpecifier":{"PortValue":55574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453818,"nanos":642963714},"http":{"id":"bf297373-363d-4983-95f4-9255a10f434b","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FlQSENbxfQaJmnGI_jTgAHyoI6hZ9jwelJ8KoksXOzlqx5544RHGTdj799P1"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FlQSENbxfQaJmnGI_jTgAHyoI6hZ9jwelJ8KoksXOzlqx5544RHGTdj799P1\"}"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e368072-6f54-45f3-b8d6-c0e1cfa97bb3","keyName":"e2e-sub-iso-b6b0be","subscription":"e2e-shared-sub-77a2f0","tenant":"e2e-shared-a-78237e","userId":"0e368072-6f54-45f3-b8d6-c0e1cfa97bb3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf297373-363d-4983-95f4-9255a10f434b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/sub-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-77a2f0"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf297373-363d-4983-95f4-9255a10f434b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf297373-363d-4983-95f4-9255a10f434b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf297373-363d-4983-95f4-9255a10f434b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34396","PortSpecifier":{"PortValue":34396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34396","PortSpecifier":{"PortValue":34396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453818,"nanos":674637716},"http":{"id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6Izl3SpWx9Jrv8L2_CUqOG5jRbpBsdv8q137uMzH0GaKlz1DnLQkKPl8VZz3"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6Izl3SpWx9Jrv8L2_CUqOG5jRbpBsdv8q137uMzH0GaKlz1DnLQkKPl8VZz3\"}"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d9c697a7-06ec-4e4a-bf4b-a39a639e8090","keyName":"e2e-sub-iso-b4aded","subscription":"e2e-shared-sub-77a2f0","tenant":"e2e-shared-b-0a6be4","userId":"d9c697a7-06ec-4e4a-bf4b-a39a639e8090","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/sub-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-77a2f0"}
{"level":"info","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b15af49f-5c6f-4b1e-b96c-fa2ac04c555a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ec87f023a7c703561b60a7760e3e3166716f689cddb0b295638d951ae201876"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81612bed4162449e5373b3efc9a5d02adea9b62267d4ca0ab26b516a9b514d0f"}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/760e9f0c068304bd829a28160b3acfe122a964cdf33e77ac55c941a8aeccf703"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea2cabae74836942f7b383d2e3402f0f8686a3f18f2a380a149bce0b76b0416b"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc19898413526cd8ac4044d87ea910b860cdee03763d270adc5da24d22437f5e"}
{"level":"info","ts":"2026-07-07T19:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41e6d007c58d31d9ae57bfcf8b53fe1a142bac02ffadf98ac1101f0ab104c505"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a598a156db502769be0507bc9a3d1e3f272e1abc0b39716a31b5715675913f3c"}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2463a6269f576c6ad9289482a08a1734400a47b1af995d328007fb40ace2e248"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e5e279062ca91709bfd9aa62331e14d6773e28679a7ec0e3ec4cc3ef523497d"}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a37fbe2c5a256a41e4332726b66672de8ab0ded23e08cd4714ae40db65a4d871"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c32b2692dddc806ab7e1339afe5d739634009c076453860eacfc07e1ef15a37"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d947f27183af581ae5087e6727bb2e639e3cb25f7e0f7a1f16d0aef6f3d53b10"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0bdc916e35cea19289d193106cb03b9918424d5e011e0df5978add33a2b597b"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68951349b93d623efc427066aae012e923fafcb629e44d6ee06eba41090bf578"}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:50:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3daf0002e7f7dd45a40dd58843d19fb9dbfe8c89f85d6ec3a3f453daf199255"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75bf2cf2b19ecd4c195ff838892f2030ce04c0c05556adbb7b989c9a82e458a8"}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:50:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"error","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"info","ts":"2026-07-07T19:51:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:51:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:51:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38452","PortSpecifier":{"PortValue":38452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7db130ab-9fa4-4190-8a2a-f968babcd212","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38452","PortSpecifier":{"PortValue":38452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453894,"nanos":108167090},"http":{"id":"7db130ab-9fa4-4190-8a2a-f968babcd212","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7db130ab-9fa4-4190-8a2a-f968babcd212","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37350","PortSpecifier":{"PortValue":37350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4405ee97-64b2-4823-8fe9-db52dac49801","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:37350","PortSpecifier":{"PortValue":37350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453894,"nanos":151663354},"http":{"id":"4405ee97-64b2-4823-8fe9-db52dac49801","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4405ee97-64b2-4823-8fe9-db52dac49801","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38462","PortSpecifier":{"PortValue":38462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38462","PortSpecifier":{"PortValue":38462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453894,"nanos":189734440},"http":{"id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v\"}"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","subscription":"e2e-rate-iso-a-d8d621","tenant":"e2e-shared-a-78237e","userId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d621\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d621"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","selected_subscription":"e2e-rate-iso-a-d8d621","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-d8d621@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04efafd9-e872-4f8e-ae45-55ff983cef7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38470","PortSpecifier":{"PortValue":38470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38470","PortSpecifier":{"PortValue":38470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453895,"nanos":249516090},"http":{"id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v\"}"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","subscription":"e2e-rate-iso-a-d8d621","tenant":"e2e-shared-a-78237e","userId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d621\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d621"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","selected_subscription":"e2e-rate-iso-a-d8d621","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-d8d621@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f16b28f-9d96-4d70-9573-4ab6b57899f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afa3e73-4933-42ba-8047-447276122796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38474","PortSpecifier":{"PortValue":38474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4afa3e73-4933-42ba-8047-447276122796","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4afa3e73-4933-42ba-8047-447276122796","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:38474","PortSpecifier":{"PortValue":38474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453896,"nanos":283318658},"http":{"id":"4afa3e73-4933-42ba-8047-447276122796","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4afa3e73-4933-42ba-8047-447276122796","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KHQy8y17l5kbFlVQ_9S4Ywg3fwacJerzLsKJ4GdimTxhY5x5kmk53BLTKF7v\"}"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","subscription":"e2e-rate-iso-a-d8d621","tenant":"e2e-shared-a-78237e","userId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4afa3e73-4933-42ba-8047-447276122796","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-d8d621\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4afa3e73-4933-42ba-8047-447276122796","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d8d621"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4afa3e73-4933-42ba-8047-447276122796","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"92dcdaef-0d81-40fd-8dd6-e795d7c81168","keyName":"e2e-rate-a-d8d621","selected_subscription":"e2e-rate-iso-a-d8d621","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-d8d621@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d8d621","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afa3e73-4933-42ba-8047-447276122796","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4afa3e73-4933-42ba-8047-447276122796","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47614","PortSpecifier":{"PortValue":47614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47614","PortSpecifier":{"PortValue":47614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453907,"nanos":20641774},"http":{"id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ef50bd5-f7e9-4936-ab95-a170ac29d3e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40620","PortSpecifier":{"PortValue":40620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0264eb2e-3798-4810-912a-823cab44d7ec","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40620","PortSpecifier":{"PortValue":40620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453907,"nanos":58062561},"http":{"id":"0264eb2e-3798-4810-912a-823cab44d7ec","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"]}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ca3c03dc79f0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=edec45d2-8572-40cf-ae40-f89921e58ca2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9c3273da-0b5c-442c-9b4c-b207d1188c18","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0264eb2e-3798-4810-912a-823cab44d7ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47630","PortSpecifier":{"PortValue":47630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"240532a8-9de7-4e82-a07f-098aa0cd6917","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47630","PortSpecifier":{"PortValue":47630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453907,"nanos":94435523},"http":{"id":"240532a8-9de7-4e82-a07f-098aa0cd6917","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh\"}"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","subscription":"e2e-rate-iso-a-173761","tenant":"e2e-shared-a-78237e","userId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-173761"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","selected_subscription":"e2e-rate-iso-a-173761","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-173761@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"240532a8-9de7-4e82-a07f-098aa0cd6917","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47644","PortSpecifier":{"PortValue":47644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47644","PortSpecifier":{"PortValue":47644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453908,"nanos":129875461},"http":{"id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh\"}"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","subscription":"e2e-rate-iso-a-173761","tenant":"e2e-shared-a-78237e","userId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-173761"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","selected_subscription":"e2e-rate-iso-a-173761","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-173761@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d5bb86c-327c-4bda-8242-4ba0eb193a9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","method":"POST","path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions","host":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47660","PortSpecifier":{"PortValue":47660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453909,"nanos":164662262},"http":{"id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","method":"POST","headers":{":authority":"e2e-shared-a-78237e.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Kt7QCF4gzHx1tP8N_XJCPlpPIBj9hLsMVVzFmY432qkCj4KbOcK8pSI34PZh\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","subscription":"e2e-rate-iso-a-173761","tenant":"e2e-shared-a-78237e","userId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\",\"requestedSubscription\":\"e2e-rate-iso-a-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78237e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-173761"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2b55a41f-33e9-4d00-b113-ef4aa777177e","keyName":"e2e-rate-a-173761","selected_subscription":"e2e-rate-iso-a-173761","selected_subscription_key":"ai-tenant-e2e-shared-a-78237e/e2e-rate-iso-a-173761@ai-tenant-e2e-shared-a-78237e/rate-test-model-78237e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78237e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-173761","namespace":"ai-tenant-e2e-shared-a-78237e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca4d832c-6c61-4fd7-bff3-520a050bf607","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b69346-d13f-415c-a180-010796aff63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40622","PortSpecifier":{"PortValue":40622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00b69346-d13f-415c-a180-010796aff63a","method":"POST","path":"/ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4/v1/completions","host":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00b69346-d13f-415c-a180-010796aff63a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:40622","PortSpecifier":{"PortValue":40622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453909,"nanos":196804753},"http":{"id":"00b69346-d13f-415c-a180-010796aff63a","method":"POST","headers":{":authority":"e2e-shared-b-0a6be4.apps.80deeea0-7e0e-4364-bf9f-ca3c03dc79f0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ARjBpiTPZqvc9spI_iDzPnIE6dBRvHEHbA8bSv8MmMzQdrOyDGydyZ6c4gA4"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b69346-d13f-415c-a180-010796aff63a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ARjBpiTPZqvc9spI_iDzPnIE6dBRvHEHbA8bSv8MmMzQdrOyDGydyZ6c4gA4\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"07abcd4b-e168-4460-9210-aae7f1e24c14","keyName":"e2e-rate-b-173761","subscription":"e2e-rate-iso-b-173761","tenant":"e2e-shared-b-0a6be4","userId":"07abcd4b-e168-4460-9210-aae7f1e24c14","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00b69346-d13f-415c-a180-010796aff63a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\",\"requestedSubscription\":\"e2e-rate-iso-b-173761\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0a6be4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0a6be4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-173761","namespace":"ai-tenant-e2e-shared-b-0a6be4","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00b69346-d13f-415c-a180-010796aff63a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-173761"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00b69346-d13f-415c-a180-010796aff63a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"07abcd4b-e168-4460-9210-aae7f1e24c14","keyName":"e2e-rate-b-173761","selected_subscription":"e2e-rate-iso-b-173761","selected_subscription_key":"ai-tenant-e2e-shared-b-0a6be4/e2e-rate-iso-b-173761@ai-tenant-e2e-shared-b-0a6be4/rate-test-model-0a6be4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0a6be4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-173761","namespace":"ai-tenant-e2e-shared-b-0a6be4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b69346-d13f-415c-a180-010796aff63a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:51:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00b69346-d13f-415c-a180-010796aff63a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/342542b32319bd50b40dad75904a5b80e44386f19350a7e879630a8a585cc3b7"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/858737e5910f9aef8404e7807a7d456cc6d4fa8c9d8c92715ea4e9479a39f113"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a7014dfbb998625d8bf6a1e8dc856c17a380b935659ba88154066de2dfbba5f"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8431eaca03f05663bc8878f96c48012c95276a211ed68e926f3d170b4b1849a"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21f2bd0dc70ce7995e8d98a2df02436938ec628a78bc5bd27f74bf6a8349c1ef"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfc6fec0e5157bd08c730f015f8204aa7cde89903d3c679a73b2386fad21d61e"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa471f9e75ab5fc9c94cc5fd9cbf36b3a4882914a9fa00bb93ab945e5061b708"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cc2df516eca13b6514d857f0075bcd8c24d22efc5dc1ae38b26180cb12fdbb1"}
{"level":"info","ts":"2026-07-07T19:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2fedf08a86045edbd778552e16e0c1d3cf51c2c3bff20d1daec94aaddd46e93f"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc306a7b8831bbe43e441ac0a08bee13a9f70b0496af68e371ffa6793911d833"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceaec7b63a6ed07d9ff50b8eca8eee79e9881a78ce45aa8aee6aa009d72d1214"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a20e0895dfb512d23f70c6a16dc5a9c754354521d9ae6e2dc26132cc2d4a3c2"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fa977a67904a921dff500d4272d71d8627c554ac5773a899a3733e24d4a457c"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a11b6878200a80b30ee36808b667f0fe671bd7721e3e40265afa1057bcbaa96"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3d42c2b57450ed04f288524a42f65367757ff2542a0908510bb48d375141e55"}
{"level":"info","ts":"2026-07-07T19:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/576b5e9cfc5d2d4ce6cf1ff27c95a4c52f2ec2d99b04685c31e75245c95fd6b9"}
{"level":"info","ts":"2026-07-07T19:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a1e4b614a6766ca1aae4ca7d5e2c29a076481610c276076770169530b01aab"}
{"level":"info","ts":"2026-07-07T19:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f504c7355bc611456c1d87759d86c72ae8b9f1da546a578aee1b8f7e6aed3f87"}
{"level":"info","ts":"2026-07-07T19:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59c0febfe49333229aae93c866f813498aa79de9b2d6949abfebfde217be836b"}
{"level":"info","ts":"2026-07-07T19:52:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d514bed68704849ea029784d7df7c6259e359e481097a8f4d58b5924b56b5a8a"}