--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:35:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:35:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:35:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:35:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:35:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"}
{"level":"debug","ts":"2026-07-16T11:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:35:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:35:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"}
{"level":"info","ts":"2026-07-16T11:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/145c46ac3942b3dca850b0430529a94b31afc2b751e8a62349431c31d4d98604"}
{"level":"info","ts":"2026-07-16T11:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71f046fb4954d36491046ddae9bd7f065155173a870652814d36f019d7317a76"}
{"level":"info","ts":"2026-07-16T11:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bfab5d3f84aac9a01ed77b80eeed520e81427fa5df297174da25b3977bb8430"}
{"level":"info","ts":"2026-07-16T11:36:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b79f651680b889ea4402ce17d17d57bd8243d67a21e493b7ef4a85c20f78dac"}
{"level":"info","ts":"2026-07-16T11:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1a3ba16f57b3d15b03544be3faaf1987ecaa99be5ffcb317d3aa190a4f97dc4"}
{"level":"info","ts":"2026-07-16T11:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/496e005c5e4c28a22f87198789f335c3a38d63682e3c82f5b8d2cb5693ebab40"}
{"level":"info","ts":"2026-07-16T11:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c1eeb335f21821848f888c403156fca3577ac8930f46bf285e4f8bb99ef3213"}
{"level":"info","ts":"2026-07-16T11:36:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/933a2ec2fefe3f021cf777cd5d8d486ecccbec62213d67106abdcac7525a5594"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26"}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c"}
{"level":"error","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"debug","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b"}
{"level":"debug","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"error","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"error","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:37:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:37:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee"}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:38:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c"}
{"level":"info","ts":"2026-07-16T11:38:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48086","PortSpecifier":{"PortValue":48086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48086","PortSpecifier":{"PortValue":48086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201881,"nanos":554516710},"http":{"id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2a6d7c9-2dba-41aa-a908-32b6d2c4ea6b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55926","PortSpecifier":{"PortValue":55926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43babe8e-f051-442c-aed5-18bfeba489fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55926","PortSpecifier":{"PortValue":55926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201881,"nanos":622903820},"http":{"id":"43babe8e-f051-442c-aed5-18bfeba489fc","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43babe8e-f051-442c-aed5-18bfeba489fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48102","PortSpecifier":{"PortValue":48102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","method":"GET","path":"/maas-api/v1/api-keys/04b1f0e6-7ab3-44c7-bc39-d9fe27db14dd","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48102","PortSpecifier":{"PortValue":48102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201881,"nanos":696342647},"http":{"id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","method":"GET","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/04b1f0e6-7ab3-44c7-bc39-d9fe27db14dd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/04b1f0e6-7ab3-44c7-bc39-d9fe27db14dd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d6b6aca-acfa-467b-bedd-7b12ac4e2e63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55932","PortSpecifier":{"PortValue":55932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","method":"GET","path":"/maas-api/v1/api-keys/5c0e4d45-ce95-4ba0-881d-f3acc68edbef","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55932","PortSpecifier":{"PortValue":55932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201881,"nanos":740785147},"http":{"id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","method":"GET","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5c0e4d45-ce95-4ba0-881d-f3acc68edbef",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5c0e4d45-ce95-4ba0-881d-f3acc68edbef",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0aebefaf-5156-4ac2-845d-32c0fa1e834c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"577325c1-5268-4e6c-8470-4044f5353991","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"577325c1-5268-4e6c-8470-4044f5353991","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"577325c1-5268-4e6c-8470-4044f5353991","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33858","PortSpecifier":{"PortValue":33858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201901,"nanos":55977419},"http":{"id":"577325c1-5268-4e6c-8470-4044f5353991","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"577325c1-5268-4e6c-8470-4044f5353991","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"577325c1-5268-4e6c-8470-4044f5353991","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"577325c1-5268-4e6c-8470-4044f5353991","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"577325c1-5268-4e6c-8470-4044f5353991","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"577325c1-5268-4e6c-8470-4044f5353991","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51058","PortSpecifier":{"PortValue":51058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ec96e26-56af-4da8-919a-3473813c24d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51058","PortSpecifier":{"PortValue":51058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201901,"nanos":102321037},"http":{"id":"3ec96e26-56af-4da8-919a-3473813c24d5","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec96e26-56af-4da8-919a-3473813c24d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33868","PortSpecifier":{"PortValue":33868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33868","PortSpecifier":{"PortValue":33868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201901,"nanos":142234615},"http":{"id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","method":"GET","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EHc8r5NsrrlTraE8_shItw5AqJoXdr87c0LOIAFZiAf2Z8SPtUQ57yfP0M6o"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EHc8r5NsrrlTraE8_shItw5AqJoXdr87c0LOIAFZiAf2Z8SPtUQ57yfP0M6o\"}"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d8bac01f-d191-42d3-86a7-59b17b1bd84d","keyName":"e2e-auth-iso-a-e7405f","subscription":"e2e-auth-iso-11886e","tenant":"e2e-shared-a-8bae7d","userId":"d8bac01f-d191-42d3-86a7-59b17b1bd84d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-11886e"}
{"level":"info","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f992f3-3e64-4ff5-b24a-b43b609d25c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36520","PortSpecifier":{"PortValue":36520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36520","PortSpecifier":{"PortValue":36520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201925,"nanos":556272515},"http":{"id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56c98cd5-248f-457b-9d57-64c6483d0ce4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c565b44-a92c-4520-b638-f003935b34ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47620","PortSpecifier":{"PortValue":47620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c565b44-a92c-4520-b638-f003935b34ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c565b44-a92c-4520-b638-f003935b34ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47620","PortSpecifier":{"PortValue":47620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201925,"nanos":598462739},"http":{"id":"9c565b44-a92c-4520-b638-f003935b34ee","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c565b44-a92c-4520-b638-f003935b34ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c565b44-a92c-4520-b638-f003935b34ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c565b44-a92c-4520-b638-f003935b34ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c565b44-a92c-4520-b638-f003935b34ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c565b44-a92c-4520-b638-f003935b34ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47630","PortSpecifier":{"PortValue":47630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3f5c19e-145c-4750-bebb-e86376b19195","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47630","PortSpecifier":{"PortValue":47630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201925,"nanos":637322256},"http":{"id":"b3f5c19e-145c-4750-bebb-e86376b19195","method":"GET","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Z5ITbaRZeCJaGJug_JeTmbtXc3Rzd7etnK5Cjiw6R6E3jMuIpBkGBS8dVio5"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Z5ITbaRZeCJaGJug_JeTmbtXc3Rzd7etnK5Cjiw6R6E3jMuIpBkGBS8dVio5\"}"}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T11:38:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f5c19e-145c-4750-bebb-e86376b19195","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52542","PortSpecifier":{"PortValue":52542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ee76e73-fe59-443b-a044-c58d6c427799","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52542","PortSpecifier":{"PortValue":52542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201942,"nanos":772375386},"http":{"id":"0ee76e73-fe59-443b-a044-c58d6c427799","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ee76e73-fe59-443b-a044-c58d6c427799","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5438087-e5db-409e-9095-84783816e0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55460","PortSpecifier":{"PortValue":55460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5438087-e5db-409e-9095-84783816e0bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5438087-e5db-409e-9095-84783816e0bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55460","PortSpecifier":{"PortValue":55460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201942,"nanos":807611661},"http":{"id":"c5438087-e5db-409e-9095-84783816e0bb","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5438087-e5db-409e-9095-84783816e0bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5438087-e5db-409e-9095-84783816e0bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5438087-e5db-409e-9095-84783816e0bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5438087-e5db-409e-9095-84783816e0bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5438087-e5db-409e-9095-84783816e0bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201942,"nanos":845436893},"http":{"id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcb6cc2a-c83d-41a7-a042-f6a10f8df586","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55470","PortSpecifier":{"PortValue":55470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55470","PortSpecifier":{"PortValue":55470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201942,"nanos":893745047},"http":{"id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1ee2bab-e7c7-4802-ba37-7a391c13b74b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44720","PortSpecifier":{"PortValue":44720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44720","PortSpecifier":{"PortValue":44720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201957,"nanos":879109149},"http":{"id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bb0cd8e-77f5-4af6-99b2-a411e87ddcb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59110","PortSpecifier":{"PortValue":59110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59110","PortSpecifier":{"PortValue":59110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201957,"nanos":920228858},"http":{"id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf5a9f2a-173e-40a8-9f15-c592b2c573f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59112","PortSpecifier":{"PortValue":59112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","method":"GET","path":"/maas-api/v1/api-keys/575770ef-b79f-4f51-a6cc-bdcedf450d16","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:59112","PortSpecifier":{"PortValue":59112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201957,"nanos":954708725},"http":{"id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","method":"GET","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/575770ef-b79f-4f51-a6cc-bdcedf450d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/575770ef-b79f-4f51-a6cc-bdcedf450d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87c53115-ea1d-43c3-b8f6-0dc2e47baf28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44732","PortSpecifier":{"PortValue":44732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","method":"GET","path":"/maas-api/v1/api-keys/575770ef-b79f-4f51-a6cc-bdcedf450d16","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44732","PortSpecifier":{"PortValue":44732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201957,"nanos":990534546},"http":{"id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","method":"GET","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/575770ef-b79f-4f51-a6cc-bdcedf450d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/575770ef-b79f-4f51-a6cc-bdcedf450d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abb54458-8ba7-4705-b562-cfc14ab9ed9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60548","PortSpecifier":{"PortValue":60548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55fcc328-6f0f-4450-9256-bfdb164cf764","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60548","PortSpecifier":{"PortValue":60548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201977,"nanos":239912338},"http":{"id":"55fcc328-6f0f-4450-9256-bfdb164cf764","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55fcc328-6f0f-4450-9256-bfdb164cf764","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20039361-c00c-41bb-8e9b-687d4b60598f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201977,"nanos":277507851},"http":{"id":"20039361-c00c-41bb-8e9b-687d4b60598f","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/auth-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20039361-c00c-41bb-8e9b-687d4b60598f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60552","PortSpecifier":{"PortValue":60552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"206927a4-4b68-44e3-8a98-b243113d9f43","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60552","PortSpecifier":{"PortValue":60552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784201977,"nanos":315414613},"http":{"id":"206927a4-4b68-44e3-8a98-b243113d9f43","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pzZ91u5lhf9nk5mQ_7gmshmz7RHVkrVBODOpFOUUysZGiTfy66KoeUMM5xWj"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pzZ91u5lhf9nk5mQ_7gmshmz7RHVkrVBODOpFOUUysZGiTfy66KoeUMM5xWj\"}"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be480cdb-9803-4d2b-a469-c051a3b7e5e5","keyName":"e2e-auth-iso-a-53b40c","subscription":"e2e-auth-iso-dba3e6","tenant":"e2e-shared-a-8bae7d","userId":"be480cdb-9803-4d2b-a469-c051a3b7e5e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/auth-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dba3e6"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"206927a4-4b68-44e3-8a98-b243113d9f43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17d48875b316c4ce77f01b8caf324eb3aa56482b84aebbe96b0dd791bd16750c"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f1c09d5015ddabb6bb48579b9dd422ce25661e14164f6e8284ffdf9b92d7c6a"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bcdc63fbf8468990c773f2501e74a4d8b782b6b64ada8ffc9272a44234fa26a"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba390515ed07e69f158be7f0c6d7399ec72fd51f16b3898fdb5981d35370417c"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8bdf0ccc6cd8ff8c9368c3f848e0e0b7ea3e03573faf5547fd48c85da3a978c"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/939114565d71b9078bb382b07fb96e770398313bf722d8962a780b49056b646d"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e24b8795d37079518ef57c3d8494cd729905b3ef8338e5a4aed2f249f38856ee"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4e8cf9839dc1a05df2958dce6649f5dc0c10ff6ed0cfd31ca8c769fbe495932"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/736019ee3f7ad84125e7edcb85f78afd3a7e46f3e211328ebe9ce8e959b20c58"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e581ee5703946b7855b559a37036c27b0667bac7a0a9711fca10b7bc5f451ee0"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a636709468cc718bfbe9d741e9e788206bbf6ce14900f981d4d46cf9bec92da2"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b28d3c146a8697e25573b6d3e9472851da47248dbd84626998e45329ee7a972"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e2a7364fc0121b720aed08b01a0bc021365093ebc19a171d81471ce7faf812b"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b438c258e3f1c750a24b408adae8fe1466fa718eda254d3316ede6dca5bf7ed"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4bde14305139f85a5d1655311a7364334f4fa51ea1b60a0b80a9ab76c982b26"}
{"level":"info","ts":"2026-07-16T11:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d61b63fec524e083ff634498aeeeb71ea3edd683a5ea274ec96ac7c3b91981c7"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"}
{"level":"debug","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:39:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:39:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"error","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"error","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"info","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"error","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"debug","ts":"2026-07-16T11:40:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:40:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49472","PortSpecifier":{"PortValue":49472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49472","PortSpecifier":{"PortValue":49472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202043,"nanos":206754981},"http":{"id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/sub-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8cdcfea-26ab-4dd2-aba8-31733ef5aedb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51386","PortSpecifier":{"PortValue":51386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e532ad5-3355-406c-9322-ec5cbe794cab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51386","PortSpecifier":{"PortValue":51386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202043,"nanos":247579238},"http":{"id":"6e532ad5-3355-406c-9322-ec5cbe794cab","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/sub-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e532ad5-3355-406c-9322-ec5cbe794cab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49476","PortSpecifier":{"PortValue":49476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49476","PortSpecifier":{"PortValue":49476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202043,"nanos":287825042},"http":{"id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","method":"GET","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FIYqYdmdv9FZ01dR_eBkfGcsBTAkKU19tKnNwyBHzDFnik7mSVKyrnxVLRJw"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FIYqYdmdv9FZ01dR_eBkfGcsBTAkKU19tKnNwyBHzDFnik7mSVKyrnxVLRJw\"}"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ab129b81-c1b1-4275-bf9b-bd8070a820e5","keyName":"e2e-sub-iso-c11eb4","subscription":"e2e-a-only-f2006a","tenant":"e2e-shared-a-8bae7d","userId":"ab129b81-c1b1-4275-bf9b-bd8070a820e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/sub-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f2006a"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3d0f6a4-f483-4a90-889e-94bed2b530da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51396","PortSpecifier":{"PortValue":51396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202043,"nanos":328478042},"http":{"id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","method":"GET","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5yCFtswqJALlDiUz_X1Kd8y3Bltkrm9U63tYSIW7dnVAN4ifnfJUot94lTRL"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5yCFtswqJALlDiUz_X1Kd8y3Bltkrm9U63tYSIW7dnVAN4ifnfJUot94lTRL\"}"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52394b2a-ca06-4e79-8158-e555fac92fe2","keyName":"e2e-sub-iso-369c12","subscription":"e2e-b-only-f2006a","tenant":"e2e-shared-b-a47fa3","userId":"52394b2a-ca06-4e79-8158-e555fac92fe2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/sub-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f2006a"}
{"level":"info","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cd97237-eb19-47ef-9576-dd85d3b3f6e9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51598","PortSpecifier":{"PortValue":51598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51598","PortSpecifier":{"PortValue":51598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202053,"nanos":416446458},"http":{"id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/sub-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bd7813b-bbe2-4fa8-8b3b-c36faa7546fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34598","PortSpecifier":{"PortValue":34598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"670e663d-b80d-484d-ae2e-37c54b62d72c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34598","PortSpecifier":{"PortValue":34598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202053,"nanos":459068357},"http":{"id":"670e663d-b80d-484d-ae2e-37c54b62d72c","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/sub-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670e663d-b80d-484d-ae2e-37c54b62d72c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51606","PortSpecifier":{"PortValue":51606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51606","PortSpecifier":{"PortValue":51606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202053,"nanos":496257160},"http":{"id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oxzqXfi405IUwfKw_G6fGMjuAZlFojtkY7yiscuXr6NgfbHipX2QEdINIwL1"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oxzqXfi405IUwfKw_G6fGMjuAZlFojtkY7yiscuXr6NgfbHipX2QEdINIwL1\"}"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b9c3c76-035a-4f0c-9dcf-0145caf9ba1e","keyName":"e2e-sub-iso-8f11a2","subscription":"e2e-shared-sub-a4d560","tenant":"e2e-shared-a-8bae7d","userId":"4b9c3c76-035a-4f0c-9dcf-0145caf9ba1e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/sub-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a4d560"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49fa2ccd-958e-4cd8-a231-57ad05fff1c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34612","PortSpecifier":{"PortValue":34612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34612","PortSpecifier":{"PortValue":34612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202053,"nanos":529245325},"http":{"id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vaEPSYzl9ucx3Gse_xKWWXoHbHxL5t71sYihjYSl8QbvyQWvDSbkvgyCBRV3"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vaEPSYzl9ucx3Gse_xKWWXoHbHxL5t71sYihjYSl8QbvyQWvDSbkvgyCBRV3\"}"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e2dffa6-6d02-435a-bab3-d7e51b6f1eeb","keyName":"e2e-sub-iso-6142c3","subscription":"e2e-shared-sub-a4d560","tenant":"e2e-shared-b-a47fa3","userId":"5e2dffa6-6d02-435a-bab3-d7e51b6f1eeb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/sub-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a4d560"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:40:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca316a78-18c9-4cf7-b4ec-c6ef3060ea31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"error","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:41:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce15af40e127b9e91f7f3d5203edde26f01ce99821464d175366b8029220f5aa"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d3aad9e64c7f179fef8e47d13525492fcdf555c3a8a39bdaae0ae2fbbdc3e7e"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/490458049a46d2fcf44f102fb5479be3b659cf2084938b761c81a771dd25d8ee"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf10dea2b5da6b8c297da0b514fd7e7e8801638c4c1ed008af33735d938662f6"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e970031a0d39083b6e8462f16a1970018bf45c7905bf7c49cdc321ec5985bb44"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1dc5b4209e3f8e8b40fb020b9a11a3d2b7c9d59dc951c81d06522b4f9c82bbf"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bf38ae94d2634769652509d9b5f94279e9825440f8ce7197f25eb06776c6552"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5613e5de28c7a27568a82460d93b01557341e9ca16f0c858663f570ece22a62b"}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c627f06e0993597ac3435a1d0c47c305093deada36edfb58e3f7a22e51c219"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ac82ae4f831258725aef6dace10e5a44b23505b8eb4e7aa0a42e79fa698e7a9"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af930ac18d51447bb0cff42f8f1c52051e9ea708776826f6cc5f7b876f16b57d"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c425d72988d920784220abd818d5dea3e19bcc6cecbe21cca4dc77bf20d2e4fa"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75e7c9d98258beab111c738948fb55c477a811aa1d617df307cc69a9fe249271"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0341f4609ee6068862cd54ed5602b1b3d42c86830229dcf45df22260ed1d312f"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50e0e8f9ce2b695483a0c5bcebac3b7a69247d5976b8306bd510dd554d35762b"}
{"level":"info","ts":"2026-07-16T11:41:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebe4948d4ebfbcb4126d46a776c0f701244011956425fd3a5423a9eaa3881f68"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"error","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:41:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"debug","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:41:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}
{"level":"error","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"error","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T11:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"debug","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43982","PortSpecifier":{"PortValue":43982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43982","PortSpecifier":{"PortValue":43982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202106,"nanos":48650072},"http":{"id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10a56813-8844-4a6c-a871-d4ac5c54eff8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46522","PortSpecifier":{"PortValue":46522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca518d89-851a-479c-995b-7320ec0f26ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46522","PortSpecifier":{"PortValue":46522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202106,"nanos":89822314},"http":{"id":"ca518d89-851a-479c-995b-7320ec0f26ee","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca518d89-851a-479c-995b-7320ec0f26ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43986","PortSpecifier":{"PortValue":43986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43986","PortSpecifier":{"PortValue":43986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202106,"nanos":128566792},"http":{"id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24\"}"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","subscription":"e2e-rate-iso-a-a7cadc","tenant":"e2e-shared-a-8bae7d","userId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7cadc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7cadc"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","selected_subscription":"e2e-rate-iso-a-a7cadc","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-a7cadc@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da6336d3-4504-4b7b-8b78-ab0313f669ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52719a16-c700-4002-a16b-00342053de26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44000","PortSpecifier":{"PortValue":44000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52719a16-c700-4002-a16b-00342053de26","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52719a16-c700-4002-a16b-00342053de26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44000","PortSpecifier":{"PortValue":44000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202107,"nanos":187913719},"http":{"id":"52719a16-c700-4002-a16b-00342053de26","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52719a16-c700-4002-a16b-00342053de26","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24\"}"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","subscription":"e2e-rate-iso-a-a7cadc","tenant":"e2e-shared-a-8bae7d","userId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52719a16-c700-4002-a16b-00342053de26","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7cadc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52719a16-c700-4002-a16b-00342053de26","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7cadc"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52719a16-c700-4002-a16b-00342053de26","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","selected_subscription":"e2e-rate-iso-a-a7cadc","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-a7cadc@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52719a16-c700-4002-a16b-00342053de26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52719a16-c700-4002-a16b-00342053de26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44016","PortSpecifier":{"PortValue":44016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44016","PortSpecifier":{"PortValue":44016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202108,"nanos":234269787},"http":{"id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d0URZyuR6d8REIYQ_nd4oX7X3ENdCHyuztTBP2maHDXsp0Q1BYR2deT16P24\"}"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","subscription":"e2e-rate-iso-a-a7cadc","tenant":"e2e-shared-a-8bae7d","userId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-a7cadc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a7cadc"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb930a70-a50b-4201-aeb5-4936c235ab9b","keyName":"e2e-rate-a-a7cadc","selected_subscription":"e2e-rate-iso-a-a7cadc","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-a7cadc@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a7cadc","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:41:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e70c74d-d35e-4327-bd1f-baab8eab2a42","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35326","PortSpecifier":{"PortValue":35326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35326","PortSpecifier":{"PortValue":35326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202121,"nanos":257132770},"http":{"id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9888e8-c6e0-4ebc-aca9-01489606f9a7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60454","PortSpecifier":{"PortValue":60454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60454","PortSpecifier":{"PortValue":60454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202121,"nanos":323123438},"http":{"id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"]}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f7752b369c31"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1557ee4a-3cc3-42dd-8263-f64054087332"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"146977d0-15ec-4762-84b8-ae6b9b2d9919","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd4e638-547a-44fc-a2e5-d3cd0f75c794","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35336","PortSpecifier":{"PortValue":35336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35336","PortSpecifier":{"PortValue":35336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202121,"nanos":361563443},"http":{"id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J\"}"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","subscription":"e2e-rate-iso-a-38bccf","tenant":"e2e-shared-a-8bae7d","userId":"df5a5d79-34a3-467c-9692-00df7441d97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","selected_subscription":"e2e-rate-iso-a-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-38bccf@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6bcf2794-36b1-4905-82ae-c98e6cb49a5c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35340","PortSpecifier":{"PortValue":35340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15bc3403-f9b0-472b-950c-92140db8526e","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35340","PortSpecifier":{"PortValue":35340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202122,"nanos":411115566},"http":{"id":"15bc3403-f9b0-472b-950c-92140db8526e","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J\"}"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","subscription":"e2e-rate-iso-a-38bccf","tenant":"e2e-shared-a-8bae7d","userId":"df5a5d79-34a3-467c-9692-00df7441d97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15bc3403-f9b0-472b-950c-92140db8526e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15bc3403-f9b0-472b-950c-92140db8526e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","selected_subscription":"e2e-rate-iso-a-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-38bccf@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bc3403-f9b0-472b-950c-92140db8526e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15bc3403-f9b0-472b-950c-92140db8526e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35342","PortSpecifier":{"PortValue":35342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","method":"POST","path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions","host":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35342","PortSpecifier":{"PortValue":35342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202123,"nanos":453844503},"http":{"id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","method":"POST","headers":{":authority":"e2e-shared-a-8bae7d.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uhCz9kGzJaVQydtq_X3tPjLl5qTwi0CWi805cbJLsFYBHa6qx8s9YAxxvI4J\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","subscription":"e2e-rate-iso-a-38bccf","tenant":"e2e-shared-a-8bae7d","userId":"df5a5d79-34a3-467c-9692-00df7441d97a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\",\"requestedSubscription\":\"e2e-rate-iso-a-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8bae7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8bae7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"df5a5d79-34a3-467c-9692-00df7441d97a","keyName":"e2e-rate-a-38bccf","selected_subscription":"e2e-rate-iso-a-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-a-8bae7d/e2e-rate-iso-a-38bccf@ai-tenant-e2e-shared-a-8bae7d/rate-test-model-8bae7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8bae7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-38bccf","namespace":"ai-tenant-e2e-shared-a-8bae7d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3105d86b-0388-4ba7-988c-dcd0dfa90413","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60462","PortSpecifier":{"PortValue":60462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","method":"POST","path":"/ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3/v1/completions","host":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60462","PortSpecifier":{"PortValue":60462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784202123,"nanos":495686233},"http":{"id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","method":"POST","headers":{":authority":"e2e-shared-b-a47fa3.apps.7088f38c-ab8c-4303-9d18-f7752b369c31.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oBRg0y9RBXseMDP_W6QtM8fIoZXa9vxfxCP5M6JdUjjM2v1KYG8RwDGPMoF"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oBRg0y9RBXseMDP_W6QtM8fIoZXa9vxfxCP5M6JdUjjM2v1KYG8RwDGPMoF\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0f341c1c-d032-4957-94fe-4b79f5c09627","keyName":"e2e-rate-b-38bccf","subscription":"e2e-rate-iso-b-38bccf","tenant":"e2e-shared-b-a47fa3","userId":"0f341c1c-d032-4957-94fe-4b79f5c09627","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\",\"requestedSubscription\":\"e2e-rate-iso-b-38bccf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a47fa3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a47fa3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-38bccf","namespace":"ai-tenant-e2e-shared-b-a47fa3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a47fa3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-38bccf"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0f341c1c-d032-4957-94fe-4b79f5c09627","keyName":"e2e-rate-b-38bccf","selected_subscription":"e2e-rate-iso-b-38bccf","selected_subscription_key":"ai-tenant-e2e-shared-b-a47fa3/e2e-rate-iso-b-38bccf@ai-tenant-e2e-shared-b-a47fa3/rate-test-model-a47fa3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a47fa3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-38bccf","namespace":"ai-tenant-e2e-shared-b-a47fa3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T11:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae96875-cf48-4de1-91b4-a1afcb963cf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a1af22b08d472b1cc659ade4fbe8bcab9fecef4377f89b470aa005760b55ac"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cec2fad27856fa04b7d3c770905d5c3b37fe9448fe15830c5ad1c560d299ce55"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e9f7c94e601aba5eb474185425f896ceef1a6100af5eeb26b1b5181e414b376"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c907fdb15e64e7d164e6105f3669ba79e394b0880f4f741ab27000da1d721b8"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c2aa7d815943d9a7bfdadd88da041e086c28820dcbab76a94626e85bd36f1c"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ee6e2119b6e01b31391deca70746c02403e4d28c2c9776f409590da2a1e3e7"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f8e5852c2338e3888c433ceed5b1c15269436ed2fb37fc1b858ad17cf0c17fa"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f6a6a761adecf004f3da195109363587e5981c2dfd6a5172adf317b474b06b5"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/381f2a524291afc9490e05c700309ed301b3c5c7e804fa77152fa234d788d3c7"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d99e1cba5de8a0cc191602e27b5f7ed559934294519d9cf965959f838dc091a"}
{"level":"info","ts":"2026-07-16T11:42:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef5b2a8e1037a29893be31ec259820c12dba2d95f0121a6b738ba872365c6496"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2db1098ace92c2522067d3300a5757cd04595f69462495f0250fb46d17e7c2f"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c1670db771edfaa7e9bd7810a95a5c7f0992a9082c9e85ca45c7b667be9f49b"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9a00e95eb00b603833575d29e4d8dc9d0097fcc0a6561c54d88652f18396543"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2763f3365b8c9d06c40009b69d29094c85a3b3c324036a8d23ab7ff1080864a9"}
{"level":"info","ts":"2026-07-16T11:42:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d18a25fac78297739e4965723b52d84c1cd6616e303e400845822c141d2b8efc"}
{"level":"info","ts":"2026-07-16T11:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6438edb34e1cfb6cfd755c1d9097c78281b2f4eb74fdcac64a6c6ea7ff329840"}
{"level":"info","ts":"2026-07-16T11:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0e39e200cb0b219ee5228c9c42cc90844b1089b453803402eed6befd98bb281"}
{"level":"info","ts":"2026-07-16T11:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c80b4230aa809b69290c9d6b20b26de026e2ca6f9341a563c275a6ce4d0359eb"}
{"level":"info","ts":"2026-07-16T11:42:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99350d96715ac9fe7052f01fea0c8b538d75091fec774532b5a32c953e7a89e5"}
{"level":"info","ts":"2026-07-16T11:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/583300bfd0fc0aad20392754014ee84b17f59136f504d672ee29262d53cdd4fe"}
{"level":"info","ts":"2026-07-16T11:42:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d53353a39a460c9567319055ac933eb46f33932a7eb2167e27fffd7aede1c6a"}
{"level":"info","ts":"2026-07-16T11:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0efb4a1fb770683d6f3af516cf7fe95bf79fdb5b00aaccf151becc6d948a154"}
{"level":"info","ts":"2026-07-16T11:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b40c17b62b53b1f08f325bd7514d289fc0e0c56b0939ebc3afae341d3ebeccbf"}