--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"error","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:52:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:52:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"info","ts":"2026-07-14T19:52:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c82b8c9672d9d1ffd28d30bc14305c91fa1d5c44e770ee07d3b7e27b8311d15b"}
{"level":"info","ts":"2026-07-14T19:52:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dcb98554e8dd167b2fccd563738bf0f7d4667e0a6c6424767de5503d118d8a"}
{"level":"info","ts":"2026-07-14T19:52:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39710214d067b0953934c13df83720980b9a550d1a0e792d8b4dd48f9955b8dd"}
{"level":"info","ts":"2026-07-14T19:52:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9def5a4766011b195ecd830d9bd3b065383fb4ef796c949b7142a058f19b82d8"}
{"level":"info","ts":"2026-07-14T19:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/497b4d7aee999e9276b93fa01e533bcdcf99f10d57f7fac560cc9984afdfd5c4"}
{"level":"info","ts":"2026-07-14T19:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aca986b7deb9e0bb84945fdf9445d08f7de43d53247b4c26ebef93514cd537af"}
{"level":"info","ts":"2026-07-14T19:53:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2291bb661ec2e23d05cd3bdd4b0e7912b5f56652ca481d588cf61df05bea47f"}
{"level":"info","ts":"2026-07-14T19:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eda7ab2a6e1ef7acd17cc9c0c0f444c05941eac0b13048a4fd1ce394b588132a"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"}
{"level":"info","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc"}
{"level":"debug","ts":"2026-07-14T19:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4"}
{"level":"info","ts":"2026-07-14T19:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d"}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d"}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d"}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"info","ts":"2026-07-14T19:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"error","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c"}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6"}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"}
{"level":"debug","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"info","ts":"2026-07-14T19:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57976","PortSpecifier":{"PortValue":57976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058882,"nanos":312992744},"http":{"id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62e29e3a-5cee-454c-a0ab-90afdc347b92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34574","PortSpecifier":{"PortValue":34574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34574","PortSpecifier":{"PortValue":34574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058882,"nanos":380918862},"http":{"id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ebd3ed7-72c5-4a4a-8729-89b24f1a09e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d032045c-385c-4194-b2a8-af356a96f438","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57992","PortSpecifier":{"PortValue":57992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d032045c-385c-4194-b2a8-af356a96f438","method":"GET","path":"/maas-api/v1/api-keys/f2b80b1d-1d1d-4a12-88e9-21793f4bd2bf","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d032045c-385c-4194-b2a8-af356a96f438","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57992","PortSpecifier":{"PortValue":57992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058882,"nanos":448239423},"http":{"id":"d032045c-385c-4194-b2a8-af356a96f438","method":"GET","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2b80b1d-1d1d-4a12-88e9-21793f4bd2bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d032045c-385c-4194-b2a8-af356a96f438","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d032045c-385c-4194-b2a8-af356a96f438","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2b80b1d-1d1d-4a12-88e9-21793f4bd2bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d032045c-385c-4194-b2a8-af356a96f438","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d032045c-385c-4194-b2a8-af356a96f438","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d032045c-385c-4194-b2a8-af356a96f438","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34580","PortSpecifier":{"PortValue":34580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","method":"GET","path":"/maas-api/v1/api-keys/eb37d54b-6ef1-4c40-a058-e679dfb14ac8","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34580","PortSpecifier":{"PortValue":34580}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058882,"nanos":487696970},"http":{"id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","method":"GET","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eb37d54b-6ef1-4c40-a058-e679dfb14ac8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eb37d54b-6ef1-4c40-a058-e679dfb14ac8",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:54:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"743aa3f6-7b2b-4418-8b90-fe80bca4792c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54232","PortSpecifier":{"PortValue":54232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54232","PortSpecifier":{"PortValue":54232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058901,"nanos":834932470},"http":{"id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7c40232-9c8c-459c-9884-b45e5dd715cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55278","PortSpecifier":{"PortValue":55278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c841296-08a0-437a-8745-0ea6acf59d60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55278","PortSpecifier":{"PortValue":55278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058901,"nanos":876394591},"http":{"id":"1c841296-08a0-437a-8745-0ea6acf59d60","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c841296-08a0-437a-8745-0ea6acf59d60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54240","PortSpecifier":{"PortValue":54240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1eeda7d-e271-49d9-899b-7292c4ace510","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54240","PortSpecifier":{"PortValue":54240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058901,"nanos":920443696},"http":{"id":"a1eeda7d-e271-49d9-899b-7292c4ace510","method":"GET","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JrIR5zApXKN295q3_5Yc8tdXJz8u6q8iJ9Gnuq1yBuqaJUkSbaZOUw42mWPQ"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JrIR5zApXKN295q3_5Yc8tdXJz8u6q8iJ9Gnuq1yBuqaJUkSbaZOUw42mWPQ\"}"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"177f6917-5f2b-4e9a-888c-0859c88fa256","keyName":"e2e-auth-iso-a-f9836b","subscription":"e2e-auth-iso-fb01c3","tenant":"e2e-shared-a-70659c","userId":"177f6917-5f2b-4e9a-888c-0859c88fa256","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fb01c3"}
{"level":"info","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1eeda7d-e271-49d9-899b-7292c4ace510","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56898","PortSpecifier":{"PortValue":56898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f491d929-2ef1-4293-89f6-3cd58912707c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56898","PortSpecifier":{"PortValue":56898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058919,"nanos":116943950},"http":{"id":"f491d929-2ef1-4293-89f6-3cd58912707c","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f491d929-2ef1-4293-89f6-3cd58912707c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41698","PortSpecifier":{"PortValue":41698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41698","PortSpecifier":{"PortValue":41698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058919,"nanos":157438739},"http":{"id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd8c34f8-f323-4ab4-b9fa-08aac690e1ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41702","PortSpecifier":{"PortValue":41702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41702","PortSpecifier":{"PortValue":41702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058919,"nanos":194484180},"http":{"id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","method":"GET","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XtH3IQFAD8qv8pNW_T5IS2vJDKBkFm8GL9B5AeuDcG99yl7vRaMYNvy7C1bB"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XtH3IQFAD8qv8pNW_T5IS2vJDKBkFm8GL9B5AeuDcG99yl7vRaMYNvy7C1bB\"}"}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T19:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e087fa0d-60b2-4f88-b54e-0e719b39dcd0","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53616","PortSpecifier":{"PortValue":53616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53616","PortSpecifier":{"PortValue":53616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058934,"nanos":316181118},"http":{"id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5f9832-a9cd-4650-ba78-8a171bf8b8c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45554","PortSpecifier":{"PortValue":45554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45554","PortSpecifier":{"PortValue":45554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058934,"nanos":356448748},"http":{"id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04fde406-5048-4cd3-aa7e-1f6c594d9778","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e109cf1d-08d0-41be-8a6d-84b710c60076","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058934,"nanos":394809290},"http":{"id":"e109cf1d-08d0-41be-8a6d-84b710c60076","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e109cf1d-08d0-41be-8a6d-84b710c60076","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45558","PortSpecifier":{"PortValue":45558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45558","PortSpecifier":{"PortValue":45558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058934,"nanos":435765007},"http":{"id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f2e962e-3dad-42e9-b465-65fa8bbc942c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44604","PortSpecifier":{"PortValue":44604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44604","PortSpecifier":{"PortValue":44604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058954,"nanos":348479},"http":{"id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"546d94a9-b11b-4e1c-8dab-6b8ada861879","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"796095c6-a94e-46ad-90e7-6c946977558a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51722","PortSpecifier":{"PortValue":51722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"796095c6-a94e-46ad-90e7-6c946977558a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"796095c6-a94e-46ad-90e7-6c946977558a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51722","PortSpecifier":{"PortValue":51722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058954,"nanos":39645987},"http":{"id":"796095c6-a94e-46ad-90e7-6c946977558a","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"796095c6-a94e-46ad-90e7-6c946977558a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"796095c6-a94e-46ad-90e7-6c946977558a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"796095c6-a94e-46ad-90e7-6c946977558a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"796095c6-a94e-46ad-90e7-6c946977558a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"796095c6-a94e-46ad-90e7-6c946977558a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51734","PortSpecifier":{"PortValue":51734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","method":"GET","path":"/maas-api/v1/api-keys/3ae75f4c-ade1-4a2c-9d14-f3188437dcda","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51734","PortSpecifier":{"PortValue":51734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058954,"nanos":76546666},"http":{"id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","method":"GET","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3ae75f4c-ade1-4a2c-9d14-f3188437dcda",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3ae75f4c-ade1-4a2c-9d14-f3188437dcda",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aa3a113-d1b2-4e4f-946f-9daa1312419e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44614","PortSpecifier":{"PortValue":44614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20ed4d84-c02d-4801-b615-e807be5c01c6","method":"GET","path":"/maas-api/v1/api-keys/3ae75f4c-ade1-4a2c-9d14-f3188437dcda","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44614","PortSpecifier":{"PortValue":44614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058954,"nanos":110546915},"http":{"id":"20ed4d84-c02d-4801-b615-e807be5c01c6","method":"GET","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3ae75f4c-ade1-4a2c-9d14-f3188437dcda",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3ae75f4c-ade1-4a2c-9d14-f3188437dcda",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:55:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20ed4d84-c02d-4801-b615-e807be5c01c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44330","PortSpecifier":{"PortValue":44330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44330","PortSpecifier":{"PortValue":44330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058971,"nanos":436663844},"http":{"id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b088bf17-ca87-42fe-a676-b40b3f89d99b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35292","PortSpecifier":{"PortValue":35292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52224eb6-1eff-9d2d-bd99-deed1abda027","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35292","PortSpecifier":{"PortValue":35292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058971,"nanos":474370055},"http":{"id":"52224eb6-1eff-9d2d-bd99-deed1abda027","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/auth-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52224eb6-1eff-9d2d-bd99-deed1abda027","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44340","PortSpecifier":{"PortValue":44340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44340","PortSpecifier":{"PortValue":44340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058971,"nanos":512076533},"http":{"id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NELfT4t2O2qfeYZk_9lv0k9FXfg4mXQauserTVKk9PaPMG9H5CHuGAJfokiB"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NELfT4t2O2qfeYZk_9lv0k9FXfg4mXQauserTVKk9PaPMG9H5CHuGAJfokiB\"}"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b1f3a9e-8c6e-4f85-b424-eac01a82f886","keyName":"e2e-auth-iso-a-3728bd","subscription":"e2e-auth-iso-51a8e2","tenant":"e2e-shared-a-70659c","userId":"0b1f3a9e-8c6e-4f85-b424-eac01a82f886","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/auth-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-51a8e2"}
{"level":"info","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:56:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92605a0a-dbfd-409b-a747-3a4374eb67d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:56:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7a4cf68a44c6745d6e9b6aa0522d2c59215de2df8b4d50626f2d7e3a48ed5a4"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eac52d7b66f59a9a9c2c391756f2d76f332d0223b905fb7c850f71fdff55f98"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a69e3687227fb6f251911667465b6832660dcb1d02fa5bc927d8fb45e6547c1c"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ad254a48141de7d874031e7687aeaee6b87cc5449d409383564a9490e3dc90"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7294fed8612026d61dbfe5e9248a2c376cfe13c686e9b9dfc2e7740ecd20e0fc"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f5eda3242d8822a57124f6fc4df5e8051c7240ca8172dcea073d70e63e9fbd6"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ad916214a6919dd7c6dedd42b58ffd8ae78fe55ac2349e5e03d983148a9f440"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46192cc955b627a47839707cee63820af027a1da2f1c78d11616d16dd5e6254b"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fde000fcdfd66c6056d227226b586d6b2c42d214a1613e688454d8a807604ba"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a01bcbc5e94bc6c9920841e74adf962713ac8a459941c86307d1fa30ed413981"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97b9cd472c8b077119d053805f4cb03224bb325994af886edda6312fb446ad2a"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bbd273ef63b6daa89ca3cde68b2ae3714919fe53023d31a5568d8fcf38848ad"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f9f511231bb7f18d81cc7cf7705373d9882a156686d520148b77cdfb96f3b8"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e39625e3c399229318610e5a4ad7dd79228a99acd92a1054b84c530eec47a38d"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8227bc3ffcc326b3189d6070d3e9f1312e1bd402ed99850c6d7aca5e245f8e9"}
{"level":"info","ts":"2026-07-14T19:56:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/810e9b6d00f7a662aea15b34b76b8a653b783c620500b7eb69781ddf4d4e3817"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"error","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"error","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905"}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905"}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905"}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634"}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634"}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59"}
{"level":"error","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"error","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"error","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905"}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e"}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"debug","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"debug","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"info","ts":"2026-07-14T19:57:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46904","PortSpecifier":{"PortValue":46904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46904","PortSpecifier":{"PortValue":46904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059024,"nanos":112291883},"http":{"id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/sub-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03a97ed6-92e2-4c8f-94a6-9aa9d00d9db1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51830","PortSpecifier":{"PortValue":51830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51830","PortSpecifier":{"PortValue":51830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059024,"nanos":152261152},"http":{"id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/sub-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4fb34fb-bc33-4c57-b273-2a69c4ef3704","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46914","PortSpecifier":{"PortValue":46914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61187ef6-3cfb-4047-ae1e-746672d08374","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46914","PortSpecifier":{"PortValue":46914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059024,"nanos":188861216},"http":{"id":"61187ef6-3cfb-4047-ae1e-746672d08374","method":"GET","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WIkvzlOOMEl6HJ4e_IH0tk4HiN0PQFfgN0pStGvsOH9c5ZKXm1hgGzytguMW"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WIkvzlOOMEl6HJ4e_IH0tk4HiN0PQFfgN0pStGvsOH9c5ZKXm1hgGzytguMW\"}"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79995aa9-bf2c-40f4-a038-cadd25269b37","keyName":"e2e-sub-iso-ac1d21","subscription":"e2e-a-only-386b0d","tenant":"e2e-shared-a-70659c","userId":"79995aa9-bf2c-40f4-a038-cadd25269b37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/sub-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-386b0d"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61187ef6-3cfb-4047-ae1e-746672d08374","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5277076-a547-4c17-ae18-1a315c4c07e4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059024,"nanos":219171705},"http":{"id":"d5277076-a547-4c17-ae18-1a315c4c07e4","method":"GET","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RUzDAK6wiYi8CHy2_nJUqNJ5UAucJXcn8sFLxqWWzxi1Ocof2fM8sOqxnC6Z"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RUzDAK6wiYi8CHy2_nJUqNJ5UAucJXcn8sFLxqWWzxi1Ocof2fM8sOqxnC6Z\"}"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"419349fc-0897-43f3-8228-a02c4b7918dd","keyName":"e2e-sub-iso-0e317a","subscription":"e2e-b-only-386b0d","tenant":"e2e-shared-b-356b53","userId":"419349fc-0897-43f3-8228-a02c4b7918dd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/sub-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-386b0d"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5277076-a547-4c17-ae18-1a315c4c07e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34612","PortSpecifier":{"PortValue":34612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34612","PortSpecifier":{"PortValue":34612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059034,"nanos":359472443},"http":{"id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/sub-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7bffb36-a541-41da-b5f5-d8cb363a2d76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45534","PortSpecifier":{"PortValue":45534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45534","PortSpecifier":{"PortValue":45534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059034,"nanos":396195614},"http":{"id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/sub-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca2a0ce-2530-4dac-8660-57ceb67ad8fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a5030d-9f22-49cd-b134-03cb4e74b645","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34620","PortSpecifier":{"PortValue":34620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059034,"nanos":428639138},"http":{"id":"45a5030d-9f22-49cd-b134-03cb4e74b645","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1S75rIYGhtpdwMM1J_du0S1YT1O6mBubGbjIcNWHSLBFpdyCin6IyEejKmzFg"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1S75rIYGhtpdwMM1J_du0S1YT1O6mBubGbjIcNWHSLBFpdyCin6IyEejKmzFg\"}"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94c61ca4-3244-4c52-a7f9-60c590a8f256","keyName":"e2e-sub-iso-904f5a","subscription":"e2e-shared-sub-f775d6","tenant":"e2e-shared-a-70659c","userId":"94c61ca4-3244-4c52-a7f9-60c590a8f256","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/sub-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f775d6"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a5030d-9f22-49cd-b134-03cb4e74b645","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45540","PortSpecifier":{"PortValue":45540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45540","PortSpecifier":{"PortValue":45540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059034,"nanos":456103252},"http":{"id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17vAXykZVql3Ti0HO_clylNE29D7Kfv53A3GDmSupfs3A95lCbwrtAGXNP8xG"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17vAXykZVql3Ti0HO_clylNE29D7Kfv53A3GDmSupfs3A95lCbwrtAGXNP8xG\"}"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e603202d-41cc-40cf-9b7a-9db8a707e0ee","keyName":"e2e-sub-iso-479964","subscription":"e2e-shared-sub-f775d6","tenant":"e2e-shared-b-356b53","userId":"e603202d-41cc-40cf-9b7a-9db8a707e0ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/sub-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f775d6"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:57:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62580f88-d826-4b4a-baff-ce96cf2c1dff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed2993e15e67062fa2b82cf6c9340fab47e950be9e62df9c72cd38bb8ce8d44b"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a44122c7b5e26bd47b9f6142cfd8e74437a7e3280ca75eb7e23d27fd742cbf8"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30efdbaca60373c756c3a13e4fa5e3e4465137fe0cdc10f8631122a8794a69ad"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60f257ba1ec0f429447f6d211f4aa4f3857285628366bee86bc12ecb739cf03d"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4ea5e08d94c34ebe5bf0094a60f5e27f8c51ead95dfafba6a53ca63fd6790ea"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3765cc13ba1fec38a96d19ec5ee162f1c959472363c91212710c58b8147a8471"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cef430fc78091ae4d79e9f7233fc58589610598571f1a9da6992a80acb401561"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44213c966b65f042d8e91ec89a70da9eb0faeb98e27d7231a267abc76ee0d326"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2e3d69d92f1dfa8ed9223dd97d543b2bb04bdbf545b4806a49ece0947068962"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7522f49dd80da0851b3609882c24a348f598d042c06034986fc8baaa0685341e"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bb103ee48160a796fd21873680e6e8a2afb5fadc4cc255ba751757e2c60a120"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e1dee1cb8ba74327608a6bab94e5d4c515c3f132c2159b437d731aca81c3905"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d4f777c37a6be940b6903e59578819ebb62c06fa2a3acf9abcaa2b47ca20f59"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c96a4e46fd3398470d20192af141b7e8ce34b15339e55ec57fd0560d19297642"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bdc29dccd5ab9a1809944deacaa203b243ccea955f4c62520e0f33a7754c634"}
{"level":"info","ts":"2026-07-14T19:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6c3e3b1617bdf5cdaf15856318f91f3712c82481227f6e94023b02b0b8e43e4"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:57:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:57:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:57:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:57:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:57:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"debug","ts":"2026-07-14T19:58:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"debug","ts":"2026-07-14T19:58:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:58:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"debug","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:58:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41776","PortSpecifier":{"PortValue":41776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3714975e-c5b4-461c-861a-00e804cbbbc3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41776","PortSpecifier":{"PortValue":41776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059118,"nanos":603513030},"http":{"id":"3714975e-c5b4-461c-861a-00e804cbbbc3","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3714975e-c5b4-461c-861a-00e804cbbbc3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54770","PortSpecifier":{"PortValue":54770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54770","PortSpecifier":{"PortValue":54770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059118,"nanos":646246221},"http":{"id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93d3a620-b9d3-4f30-b279-27198ccf3cc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41786","PortSpecifier":{"PortValue":41786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"390fae75-5caf-4e4f-855a-2ba9566e893c","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41786","PortSpecifier":{"PortValue":41786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059118,"nanos":686843251},"http":{"id":"390fae75-5caf-4e4f-855a-2ba9566e893c","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da\"}"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","subscription":"e2e-rate-iso-a-050ebb","tenant":"e2e-shared-a-70659c","userId":"d76ed987-6faf-4686-9af3-173acc1f34ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-050ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-050ebb"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","selected_subscription":"e2e-rate-iso-a-050ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-050ebb@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"390fae75-5caf-4e4f-855a-2ba9566e893c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41802","PortSpecifier":{"PortValue":41802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059119,"nanos":750905927},"http":{"id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da\"}"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","subscription":"e2e-rate-iso-a-050ebb","tenant":"e2e-shared-a-70659c","userId":"d76ed987-6faf-4686-9af3-173acc1f34ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-050ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-050ebb"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","selected_subscription":"e2e-rate-iso-a-050ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-050ebb@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbc9c634-026d-4047-8e4a-43093d5f8fc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a51eb734-56d3-415a-b580-36537d9feedb","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059120,"nanos":790674630},"http":{"id":"a51eb734-56d3-415a-b580-36537d9feedb","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16NzZfKMcmwWn8K5V_8OFdanLisevIYDX757bE4WGkfU9bOehn3do2qkap0da\"}"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","subscription":"e2e-rate-iso-a-050ebb","tenant":"e2e-shared-a-70659c","userId":"d76ed987-6faf-4686-9af3-173acc1f34ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-050ebb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a51eb734-56d3-415a-b580-36537d9feedb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-050ebb"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51eb734-56d3-415a-b580-36537d9feedb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d76ed987-6faf-4686-9af3-173acc1f34ef","keyName":"e2e-rate-a-050ebb","selected_subscription":"e2e-rate-iso-a-050ebb","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-050ebb@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-050ebb","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a51eb734-56d3-415a-b580-36537d9feedb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a51eb734-56d3-415a-b580-36537d9feedb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a57e8ca5-9e5e-4616-93f5-377e54041577","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35476","PortSpecifier":{"PortValue":35476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059133,"nanos":806721652},"http":{"id":"a57e8ca5-9e5e-4616-93f5-377e54041577","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a57e8ca5-9e5e-4616-93f5-377e54041577","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35454","PortSpecifier":{"PortValue":35454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d539900-5a75-4ec3-98ca-499f928b624b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35454","PortSpecifier":{"PortValue":35454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059133,"nanos":845448551},"http":{"id":"0d539900-5a75-4ec3-98ca-499f928b624b","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"]}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/601d2223c23a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b21a3c31-8a11-4850-92af-bd7ed89433a3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c633848f-26b2-4a87-bfcd-d18dcd168e31","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d539900-5a75-4ec3-98ca-499f928b624b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35490","PortSpecifier":{"PortValue":35490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a174243-5e80-452a-9338-5fdbd12a05bc","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35490","PortSpecifier":{"PortValue":35490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059133,"nanos":882447344},"http":{"id":"3a174243-5e80-452a-9338-5fdbd12a05bc","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg\"}"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","subscription":"e2e-rate-iso-a-f71f29","tenant":"e2e-shared-a-70659c","userId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","selected_subscription":"e2e-rate-iso-a-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-f71f29@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a174243-5e80-452a-9338-5fdbd12a05bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50830","PortSpecifier":{"PortValue":50830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8469493a-6564-4a4e-9b60-b71012a667b8","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50830","PortSpecifier":{"PortValue":50830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059134,"nanos":956027620},"http":{"id":"8469493a-6564-4a4e-9b60-b71012a667b8","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg\"}"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","subscription":"e2e-rate-iso-a-f71f29","tenant":"e2e-shared-a-70659c","userId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","selected_subscription":"e2e-rate-iso-a-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-f71f29@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8469493a-6564-4a4e-9b60-b71012a667b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19184d36-1812-424d-8630-7140780f2fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19184d36-1812-424d-8630-7140780f2fde","method":"POST","path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions","host":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19184d36-1812-424d-8630-7140780f2fde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059136,"nanos":1050448},"http":{"id":"19184d36-1812-424d-8630-7140780f2fde","method":"POST","headers":{":authority":"e2e-shared-a-70659c.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19184d36-1812-424d-8630-7140780f2fde","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZcqechQ49Y6ZmgG_iMabnt2c34VtqWuF1w59IuKbNsJDXduyfLpLLE0HAlg\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","subscription":"e2e-rate-iso-a-f71f29","tenant":"e2e-shared-a-70659c","userId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19184d36-1812-424d-8630-7140780f2fde","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\",\"requestedSubscription\":\"e2e-rate-iso-a-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70659c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19184d36-1812-424d-8630-7140780f2fde","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70659c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19184d36-1812-424d-8630-7140780f2fde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7f3e6b1a-6177-472f-bdab-98cab2b4e9fb","keyName":"e2e-rate-a-f71f29","selected_subscription":"e2e-rate-iso-a-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-a-70659c/e2e-rate-iso-a-f71f29@ai-tenant-e2e-shared-a-70659c/rate-test-model-70659c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-70659c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f71f29","namespace":"ai-tenant-e2e-shared-a-70659c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19184d36-1812-424d-8630-7140780f2fde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19184d36-1812-424d-8630-7140780f2fde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59082","PortSpecifier":{"PortValue":59082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","method":"POST","path":"/ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53/v1/completions","host":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59082","PortSpecifier":{"PortValue":59082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784059136,"nanos":35319976},"http":{"id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","method":"POST","headers":{":authority":"e2e-shared-b-356b53.apps.73c2f554-d590-4681-8949-601d2223c23a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GY5K3C1VRAGGwgU1_XmFs5dCHTlNxw6GHjBAUfcA0i8jAwki2kcSmmXGCVve"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GY5K3C1VRAGGwgU1_XmFs5dCHTlNxw6GHjBAUfcA0i8jAwki2kcSmmXGCVve\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2fe85ae6-48bc-4d33-a05f-71d783a8f44e","keyName":"e2e-rate-b-f71f29","subscription":"e2e-rate-iso-b-f71f29","tenant":"e2e-shared-b-356b53","userId":"2fe85ae6-48bc-4d33-a05f-71d783a8f44e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\",\"requestedSubscription\":\"e2e-rate-iso-b-f71f29\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-356b53.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-356b53","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f71f29","namespace":"ai-tenant-e2e-shared-b-356b53","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-356b53/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f71f29"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2fe85ae6-48bc-4d33-a05f-71d783a8f44e","keyName":"e2e-rate-b-f71f29","selected_subscription":"e2e-rate-iso-b-f71f29","selected_subscription_key":"ai-tenant-e2e-shared-b-356b53/e2e-rate-iso-b-f71f29@ai-tenant-e2e-shared-b-356b53/rate-test-model-356b53","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-356b53","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f71f29","namespace":"ai-tenant-e2e-shared-b-356b53","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:58:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce826bba-3fb1-4045-99e3-7b9ef14edc98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a80e44d9eb7236807847f895e0eab68d43381058664aac61708c7c24cae19822"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81fdeab68b32dc4381c8c98c4701cae1d929bbde5db29d2105eb6366e2d54f63"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62abb3c3cd80b23a264e21e9c0951d6d4b75c15df967356941d06d7945a67a6f"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e70340b084cc06133ea1240df92099a4261dcf943fc6be53f6a32abc4d7806c"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8aea595f192d27fa782cfd996da6b14842afc7130234e85786f70fa7bab9b0e1"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81353ef54abdaf2d305576df41db779252152ecef91e7ff46795fa74ca158abe"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47a7c0cafdb2dad94c64fe750e901c7c6fd772708807ebd82d4750f5842a151b"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c30275c0850b9d60f47246d7417d7fcea648a9b641a3fc392384d5117c924f3"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1384b8396fb975d8edefffa778266c7ec9e9ddbfb7d6e175329e6f7fc297cfe4"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7813935bd884fa3befd06e0079ee5cf9f639c9f2d6fa245e263809587c69d1a6"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfae8a539d662a3043915c1f3ff28da90ba28b1eb0902a2e2ba23fddde94ca32"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/968b90c4fffb244cd3829940e5335e6eec7a026ed4dd9213f6152b4c332550b0"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4da3f37b3a1bc3ea6873c37f13ce44d0a48b98ecf60208ebfafe32d36c0fda6b"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d48791816608b99b12d74a254071b4ef7fcc9db1b453849dd49f714171f9de7"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aae812260942bf481c0af7b507a5e799db834c09df2179bc870f8de7a2f9abe"}
{"level":"info","ts":"2026-07-14T19:59:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f3db6796e36f82e19a91ac5b66d6d6963314d8614c644d60b8f96bfa53fc0ab"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f7e92943f37bccaeb76ade811a61f70ea5fbabf00c9e25db4efa45d152122aa"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b2a79b208ba76c4a9f9fd0cdb84b354ec760144ebd7cbed899375ad05d5fb8a"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98c290addc78a9b4ac34fce82f09a399671403990adbc315f6ba151284e01175"}
{"level":"info","ts":"2026-07-14T19:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b8732894213be080debfa0a25092c82432945dae191c9e1451269071ddcc2ac"}
{"level":"info","ts":"2026-07-14T19:59:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ceedad75bfc0ee339196e0d5359a0675c63b11f7a9ba760d6f94b2bd337f060"}
{"level":"info","ts":"2026-07-14T19:59:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7c8d44fac42f6c7730b44c31c872e861afb18fe866ffa400609e142b4b5cc7"}
{"level":"info","ts":"2026-07-14T19:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37ef5597379699febffdb2b976ab18211454a44587e1af683aaa0c20a3c453d8"}
{"level":"info","ts":"2026-07-14T19:59:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d89c684f93c0ac4961fff20aadcd9516caa7e25c7efac1df4d8bcd054c13ba9"}