--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"debug","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"debug","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b"}
{"level":"debug","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:09:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"}
{"level":"info","ts":"2026-07-10T15:09:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"}
{"level":"info","ts":"2026-07-10T15:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff266372a371eb7b5d4934b066bdfd5ff3f3dd4e0784847dbde83770a3b55bfd"}
{"level":"info","ts":"2026-07-10T15:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ddf0695f9cfa492c4a29d7b289c1d026590ce2386ce33f74f354be523415223"}
{"level":"info","ts":"2026-07-10T15:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b36101b39526fcb9c2c56e8529b1f494c70bd2770a61bf7ce2829f95a8f53425"}
{"level":"info","ts":"2026-07-10T15:09:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e1dfe3065686348167106621af88468cb3c1981f3bd3c77b11fd3514caba2be"}
{"level":"info","ts":"2026-07-10T15:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32b0a5019b0672ca2ee68c2bb62bb5b8dc4f2b70f76cb4dc37280000f7ce099f"}
{"level":"info","ts":"2026-07-10T15:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6c3f50def8fecebbc9213bc01c9affcd5fbd3941a9fd5a3e2847392c9e0f0b2"}
{"level":"info","ts":"2026-07-10T15:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c94561f3b89da68ea977e464635f38e1725e750decaf4b5e296ba1001caac740"}
{"level":"info","ts":"2026-07-10T15:09:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5a4f920bf55a558c66e8426becde7d94eb9902e9281202843b40b3d993c6b4b"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc"}
{"level":"error","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de"}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9"}
{"level":"info","ts":"2026-07-10T15:10:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"error","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"error","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799"}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799"}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:10:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"}
{"level":"info","ts":"2026-07-10T15:10:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48426","PortSpecifier":{"PortValue":48426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f2a893c-497b-40de-b42d-4199229adc1b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48426","PortSpecifier":{"PortValue":48426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696253,"nanos":693327088},"http":{"id":"6f2a893c-497b-40de-b42d-4199229adc1b","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f2a893c-497b-40de-b42d-4199229adc1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52457589-6920-49c1-a09f-e375c57e63e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56808","PortSpecifier":{"PortValue":56808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52457589-6920-49c1-a09f-e375c57e63e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52457589-6920-49c1-a09f-e375c57e63e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56808","PortSpecifier":{"PortValue":56808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696253,"nanos":759353378},"http":{"id":"52457589-6920-49c1-a09f-e375c57e63e4","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52457589-6920-49c1-a09f-e375c57e63e4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52457589-6920-49c1-a09f-e375c57e63e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52457589-6920-49c1-a09f-e375c57e63e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52457589-6920-49c1-a09f-e375c57e63e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52457589-6920-49c1-a09f-e375c57e63e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48440","PortSpecifier":{"PortValue":48440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","method":"GET","path":"/maas-api/v1/api-keys/242d02ec-cbff-451f-bde1-7a52d118c60c","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48440","PortSpecifier":{"PortValue":48440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696253,"nanos":818053888},"http":{"id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","method":"GET","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/242d02ec-cbff-451f-bde1-7a52d118c60c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/242d02ec-cbff-451f-bde1-7a52d118c60c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8d6b6d5-32c2-4161-8524-a0fff44faca2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56814","PortSpecifier":{"PortValue":56814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4be934cf-dbf7-4115-9019-aa18c06a8395","method":"GET","path":"/maas-api/v1/api-keys/2c202349-accf-4ff3-aa06-4dc492de15cf","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56814","PortSpecifier":{"PortValue":56814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696253,"nanos":849947415},"http":{"id":"4be934cf-dbf7-4115-9019-aa18c06a8395","method":"GET","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2c202349-accf-4ff3-aa06-4dc492de15cf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2c202349-accf-4ff3-aa06-4dc492de15cf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:10:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4be934cf-dbf7-4115-9019-aa18c06a8395","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49858","PortSpecifier":{"PortValue":49858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49858","PortSpecifier":{"PortValue":49858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696267,"nanos":626289642},"http":{"id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2dfbd96-3157-47a5-b224-8a3f714297a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34348","PortSpecifier":{"PortValue":34348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34348","PortSpecifier":{"PortValue":34348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696267,"nanos":668645854},"http":{"id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d4e65de-e31a-4eb5-9a1c-bf92dc48353a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49872","PortSpecifier":{"PortValue":49872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1d58c78-d09a-43be-a249-c8609186aa00","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49872","PortSpecifier":{"PortValue":49872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696267,"nanos":710388258},"http":{"id":"d1d58c78-d09a-43be-a249-c8609186aa00","method":"GET","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19Lj0IY9PIWg0MxAw_M4OeaaeGfWM6M8CUVi1aNDa19Z0booH2XKNshvrhvsS"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19Lj0IY9PIWg0MxAw_M4OeaaeGfWM6M8CUVi1aNDa19Z0booH2XKNshvrhvsS\"}"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b24b9a2-ba5b-497c-a6c8-10795cf52768","keyName":"e2e-auth-iso-a-b99ee7","subscription":"e2e-auth-iso-57b2db","tenant":"e2e-shared-a-7b13c8","userId":"7b24b9a2-ba5b-497c-a6c8-10795cf52768","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-57b2db"}
{"level":"info","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1d58c78-d09a-43be-a249-c8609186aa00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35446","PortSpecifier":{"PortValue":35446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9f37702-1c69-43c8-9438-5091ae54ce39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35446","PortSpecifier":{"PortValue":35446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696284,"nanos":710608910},"http":{"id":"f9f37702-1c69-43c8-9438-5091ae54ce39","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9f37702-1c69-43c8-9438-5091ae54ce39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40394","PortSpecifier":{"PortValue":40394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40394","PortSpecifier":{"PortValue":40394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696284,"nanos":741260827},"http":{"id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e47bb766-6a57-4c49-8c89-abfbb86196ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afb78f84-01cb-4899-817c-744dc8097143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40398","PortSpecifier":{"PortValue":40398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afb78f84-01cb-4899-817c-744dc8097143","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afb78f84-01cb-4899-817c-744dc8097143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40398","PortSpecifier":{"PortValue":40398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696284,"nanos":784509250},"http":{"id":"afb78f84-01cb-4899-817c-744dc8097143","method":"GET","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afb78f84-01cb-4899-817c-744dc8097143","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lp6QReqY1ShQF5EU_BZ6hLZ93BfNNtWemTZE6WCVTzJA0yAPPhU46IAEDWuZ"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afb78f84-01cb-4899-817c-744dc8097143","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lp6QReqY1ShQF5EU_BZ6hLZ93BfNNtWemTZE6WCVTzJA0yAPPhU46IAEDWuZ\"}"}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afb78f84-01cb-4899-817c-744dc8097143","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afb78f84-01cb-4899-817c-744dc8097143","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb78f84-01cb-4899-817c-744dc8097143","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"afb78f84-01cb-4899-817c-744dc8097143","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afb78f84-01cb-4899-817c-744dc8097143","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T15:11:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afb78f84-01cb-4899-817c-744dc8097143","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34760","PortSpecifier":{"PortValue":34760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5148968d-bb10-4dad-82dd-a1e024c1173b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34760","PortSpecifier":{"PortValue":34760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696299,"nanos":827136879},"http":{"id":"5148968d-bb10-4dad-82dd-a1e024c1173b","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5148968d-bb10-4dad-82dd-a1e024c1173b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40064","PortSpecifier":{"PortValue":40064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40064","PortSpecifier":{"PortValue":40064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696299,"nanos":857917185},"http":{"id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"855b8cac-f78b-4de5-b5bc-05e6bb8d58cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34766","PortSpecifier":{"PortValue":34766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34766","PortSpecifier":{"PortValue":34766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696299,"nanos":887717191},"http":{"id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61d8d3f8-f05f-43c7-ac02-ba45274b49cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40072","PortSpecifier":{"PortValue":40072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c57e71aa-02b2-42a3-b706-a094d003edb0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40072","PortSpecifier":{"PortValue":40072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696299,"nanos":923700796},"http":{"id":"c57e71aa-02b2-42a3-b706-a094d003edb0","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c57e71aa-02b2-42a3-b706-a094d003edb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35664","PortSpecifier":{"PortValue":35664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35664","PortSpecifier":{"PortValue":35664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696316,"nanos":987714122},"http":{"id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"116f8f4a-a428-4b47-ae0a-182354d8a74d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52118","PortSpecifier":{"PortValue":52118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52118","PortSpecifier":{"PortValue":52118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696317,"nanos":20318255},"http":{"id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd49c83d-1c39-4bcf-8b07-2a2e5e5e563e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52130","PortSpecifier":{"PortValue":52130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","method":"GET","path":"/maas-api/v1/api-keys/eb06d4a4-7b3d-4a32-9155-fd97544162e1","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52130","PortSpecifier":{"PortValue":52130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696317,"nanos":50512724},"http":{"id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","method":"GET","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eb06d4a4-7b3d-4a32-9155-fd97544162e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eb06d4a4-7b3d-4a32-9155-fd97544162e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faf3e7a-f257-4bd1-8f03-77fb2ab29a89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6be99d8-608d-47fd-8614-2cf9015698b9","method":"GET","path":"/maas-api/v1/api-keys/eb06d4a4-7b3d-4a32-9155-fd97544162e1","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696317,"nanos":81171343},"http":{"id":"b6be99d8-608d-47fd-8614-2cf9015698b9","method":"GET","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eb06d4a4-7b3d-4a32-9155-fd97544162e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/eb06d4a4-7b3d-4a32-9155-fd97544162e1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:11:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6be99d8-608d-47fd-8614-2cf9015698b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71759150-5237-48e7-901f-a9bf8e989f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55824","PortSpecifier":{"PortValue":55824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71759150-5237-48e7-901f-a9bf8e989f59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71759150-5237-48e7-901f-a9bf8e989f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55824","PortSpecifier":{"PortValue":55824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696334,"nanos":142232748},"http":{"id":"71759150-5237-48e7-901f-a9bf8e989f59","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71759150-5237-48e7-901f-a9bf8e989f59","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71759150-5237-48e7-901f-a9bf8e989f59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71759150-5237-48e7-901f-a9bf8e989f59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71759150-5237-48e7-901f-a9bf8e989f59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71759150-5237-48e7-901f-a9bf8e989f59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35774","PortSpecifier":{"PortValue":35774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35774","PortSpecifier":{"PortValue":35774}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696334,"nanos":174855394},"http":{"id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/auth-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d87d187f-f2b9-4b9c-a1b3-99a09c9a464b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55826","PortSpecifier":{"PortValue":55826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55826","PortSpecifier":{"PortValue":55826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696334,"nanos":211019794},"http":{"id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U1ru7BE2mnUCJgdr_oXpPGLb7Hiz7OEvfQIwEVOi2AWPyvo1joSiysDZ341u"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U1ru7BE2mnUCJgdr_oXpPGLb7Hiz7OEvfQIwEVOi2AWPyvo1joSiysDZ341u\"}"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f52f6045-278c-4baa-85f4-f798ed89555e","keyName":"e2e-auth-iso-a-a6b8b1","subscription":"e2e-auth-iso-346f9e","tenant":"e2e-shared-a-7b13c8","userId":"f52f6045-278c-4baa-85f4-f798ed89555e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/auth-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-346f9e"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:12:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3e62585-2bf4-45af-9713-c0c36cb10ae4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:12:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e768324e6f96cc84c60896ddfb0787e4479d6c0b6efcec56930636e8d3b57c"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7a2ca1ca0828a40c506e8d4764ba676e6da0fb9d349cf3ae7bc0ae1a0b76da9"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b44ff4f59b5b99bfbdc9baec1a0aee9f88c7def24e6194223720f29b1814752"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1552f6e7f2dbec8883d37f32d861f3dcdf959908e6dfd72492874bc4729bdde"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/851b09f2f07d1ba2d226916ce9847bca994a78872094654a2b17c22357c9a1de"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10ed71ca58575715250fe0f4f247adb47c1432bf61ec39a241a4d53d5d0d4af0"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef1ada9211eedfb8cca3f3bdcab316112094a00dffbb90e18cd64496acaa9cdc"}
{"level":"info","ts":"2026-07-10T15:12:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec937361794f6c806685edce24613e3ffc6cf60a172334740b998da313954e80"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"debug","ts":"2026-07-10T15:12:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"error","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:12:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5"}
{"level":"error","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46ba32434164a7b83b72776865ab8b99b348713f47e977f8bede484352a587a3"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce42b799460c14ea4bd05e140df2ffbc65c006f2cc840d608c562b05a0c30523"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29e113e1a68f45d2e18a24b6d8fbc56d50bb064448f144ec7dd4adaab46376e6"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed6856b8cef8b1b09c268848df96ba57142f4d405fc7e7e886f782f847bd7579"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ceee576426303dd757a55fed2e997cd27d72100ef90a51131873c2c1135795f"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e727a648de15b357d0d6558fd543c6af336d8468ef63a0cd9cf825ca8402799"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51dff6b6d62dec29ab98cb117bee6ed31e0504a57fd9332bdb9d51e46279e162"}
{"level":"info","ts":"2026-07-10T15:12:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/083655bbaae8f803e2a5353750068090ebdc2859c705c0892ebb3b045a542b52"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:13:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"debug","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"info","ts":"2026-07-10T15:13:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46696","PortSpecifier":{"PortValue":46696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46696","PortSpecifier":{"PortValue":46696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696413,"nanos":38946283},"http":{"id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/sub-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7af79490-36af-4e2a-8ce0-e2498f1c6ba9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40086","PortSpecifier":{"PortValue":40086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d20a248-568a-4737-bdda-6858dfb255fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40086","PortSpecifier":{"PortValue":40086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696413,"nanos":78134021},"http":{"id":"4d20a248-568a-4737-bdda-6858dfb255fe","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/sub-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d20a248-568a-4737-bdda-6858dfb255fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46712","PortSpecifier":{"PortValue":46712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46712","PortSpecifier":{"PortValue":46712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696413,"nanos":115211346},"http":{"id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","method":"GET","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4ASgKRjG455L5srb_AMy4yV6dNlp3vI2XUEoFNKfOh5Thsk5dwHj62YxCoeT"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4ASgKRjG455L5srb_AMy4yV6dNlp3vI2XUEoFNKfOh5Thsk5dwHj62YxCoeT\"}"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd93a559-9cc5-4622-bc80-137c96a26a24","keyName":"e2e-sub-iso-fb1595","subscription":"e2e-a-only-bec362","tenant":"e2e-shared-a-7b13c8","userId":"bd93a559-9cc5-4622-bc80-137c96a26a24","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/sub-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bec362"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ebe5654-ed38-4e5a-8f93-99e6807a8be3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40088","PortSpecifier":{"PortValue":40088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86800a03-befc-4b57-9d77-3fc16adc80ad","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40088","PortSpecifier":{"PortValue":40088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696413,"nanos":151811743},"http":{"id":"86800a03-befc-4b57-9d77-3fc16adc80ad","method":"GET","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-4cuAulvP8mVf26lY_GVeToAkvkrRNbnhWszRPSZPBJc4U5cX7jYWHns3QJi3"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-4cuAulvP8mVf26lY_GVeToAkvkrRNbnhWszRPSZPBJc4U5cX7jYWHns3QJi3\"}"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"97d2c2bd-c7f2-490d-8168-a6f6af1a4204","keyName":"e2e-sub-iso-4c8c3b","subscription":"e2e-b-only-bec362","tenant":"e2e-shared-b-e538f1","userId":"97d2c2bd-c7f2-490d-8168-a6f6af1a4204","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/sub-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bec362"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86800a03-befc-4b57-9d77-3fc16adc80ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44362","PortSpecifier":{"PortValue":44362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44362","PortSpecifier":{"PortValue":44362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696423,"nanos":254501431},"http":{"id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/sub-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e21751e0-5be9-43d6-bf14-1f7cce7baa36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56562","PortSpecifier":{"PortValue":56562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d39f475-c969-4908-8b0c-d51fac18ce39","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56562","PortSpecifier":{"PortValue":56562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696423,"nanos":293388403},"http":{"id":"6d39f475-c969-4908-8b0c-d51fac18ce39","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/sub-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d39f475-c969-4908-8b0c-d51fac18ce39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44378","PortSpecifier":{"PortValue":44378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44378","PortSpecifier":{"PortValue":44378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696423,"nanos":326875078},"http":{"id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Njbg7OeeuueQdN6B_7frEtzU2jdmGntX7VBUZtZWExAy1w2sP5LLd8FxngoA"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Njbg7OeeuueQdN6B_7frEtzU2jdmGntX7VBUZtZWExAy1w2sP5LLd8FxngoA\"}"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3e4c4b3-eb1f-4089-b0a0-007b76122619","keyName":"e2e-sub-iso-e3fbcb","subscription":"e2e-shared-sub-7d5332","tenant":"e2e-shared-a-7b13c8","userId":"d3e4c4b3-eb1f-4089-b0a0-007b76122619","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/sub-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7d5332"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8c6cf42-0af1-4181-b598-d6ccebcc7def","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56568","PortSpecifier":{"PortValue":56568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56568","PortSpecifier":{"PortValue":56568}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696423,"nanos":357248155},"http":{"id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gu0lxmN8uh8cHprC_pfT8R6iapx7goLy9n2vjP1Nf67EfPMuSuUJ4t9cRZUU"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gu0lxmN8uh8cHprC_pfT8R6iapx7goLy9n2vjP1Nf67EfPMuSuUJ4t9cRZUU\"}"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0c48c728-791b-413c-8828-e832201c3695","keyName":"e2e-sub-iso-4148e4","subscription":"e2e-shared-sub-7d5332","tenant":"e2e-shared-b-e538f1","userId":"0c48c728-791b-413c-8828-e832201c3695","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/sub-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7d5332"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:13:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd0bcb45-9a70-4e23-b851-b9a345d1a3d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d876c11e874a893bced29440b7633db7398f8590ddb87214a8b597040a5af7"}
{"level":"info","ts":"2026-07-10T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05f1a75e6258e8c9da737ed89c8f0a8918581b3419cb301c0afafaea358d66f5"}
{"level":"info","ts":"2026-07-10T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1978a2e1ebf047c35bf33ff0d7bdf3b2ad28e70cdc31493db73f22ffde9a36c"}
{"level":"info","ts":"2026-07-10T15:13:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9f97e1fea94669591b32a420501be4076a76243b86f682a9aed45f53382dc81"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eab0540fd2c29a06d0a87686b421a448b5187126e3d60b928f8df998f17136b3"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f97fb4a350e38e63636331d3110e4c874b6e1d4325d98abf509aec32b6dc88e"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3e052c0e8004d22313da3d12122309ae924826e1c82be27fc9d38bc9b24219"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25c506078271e4683e6b8fa162867c37bfd1bfd53d4a77d06d7bd6c76cda19a2"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ab5e145ca93039cef646816014667dbed5958f79c4b9ea01c6356d53ede21c3"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12ea12a734c0ef91ecb35ad59643bab787220ce059dda36aa52504157739131d"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/718814e9da2c52a5b320b157d78d40b5bc1c274eee82ebba0b4a1ada290d5daa"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7f5a2b7f1379fbeeb0653d0a0890465209b17b8566a9a4e894834ec4de51d6dc"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc88deb11ded0cd921f8233865f11b9d0c4b38b67b522edc618ea59e046de7a8"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64d677e03aecd095edd2f41b436eb5a9b67b8a35293d8cd5d3deb355cdfda258"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ee2631d0065c2ea5fc1da1c2c0c181d54b648324a8fec8264cd704d41d19e69"}
{"level":"info","ts":"2026-07-10T15:13:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1954d864f6f3ad5eec1d741236ffcc23df675bb6593a4a323c5a588e93ab18db"}
{"level":"debug","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"debug","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"error","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48616","PortSpecifier":{"PortValue":48616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d50981d5-3498-99ef-95b2-e8e25c505d89","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48616","PortSpecifier":{"PortValue":48616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696485,"nanos":856780441},"http":{"id":"d50981d5-3498-99ef-95b2-e8e25c505d89","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def0fdac-800d-4be1-b992-10b9430567b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"def0fdac-800d-4be1-b992-10b9430567b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def0fdac-800d-4be1-b992-10b9430567b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696485,"nanos":893813522},"http":{"id":"def0fdac-800d-4be1-b992-10b9430567b5","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"def0fdac-800d-4be1-b992-10b9430567b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"def0fdac-800d-4be1-b992-10b9430567b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def0fdac-800d-4be1-b992-10b9430567b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def0fdac-800d-4be1-b992-10b9430567b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48630","PortSpecifier":{"PortValue":48630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48630","PortSpecifier":{"PortValue":48630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696485,"nanos":938112542},"http":{"id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz\"}"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","subscription":"e2e-rate-iso-a-2e54f9","tenant":"e2e-shared-a-7b13c8","userId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-2e54f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e54f9"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","selected_subscription":"e2e-rate-iso-a-2e54f9","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-2e54f9@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48640","PortSpecifier":{"PortValue":48640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40426548-7702-4b43-b519-b2c381ee1a55","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48640","PortSpecifier":{"PortValue":48640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696486,"nanos":994254882},"http":{"id":"40426548-7702-4b43-b519-b2c381ee1a55","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz"}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz\"}"}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","subscription":"e2e-rate-iso-a-2e54f9","tenant":"e2e-shared-a-7b13c8","userId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-2e54f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40426548-7702-4b43-b519-b2c381ee1a55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e54f9"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","selected_subscription":"e2e-rate-iso-a-2e54f9","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-2e54f9@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40426548-7702-4b43-b519-b2c381ee1a55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40426548-7702-4b43-b519-b2c381ee1a55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47470","PortSpecifier":{"PortValue":47470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47470","PortSpecifier":{"PortValue":47470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696488,"nanos":29720400},"http":{"id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz\"}"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","subscription":"e2e-rate-iso-a-2e54f9","tenant":"e2e-shared-a-7b13c8","userId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-2e54f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e54f9"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","selected_subscription":"e2e-rate-iso-a-2e54f9","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-2e54f9@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43592","PortSpecifier":{"PortValue":43592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43592","PortSpecifier":{"PortValue":43592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696500,"nanos":826664472},"http":{"id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57386","PortSpecifier":{"PortValue":57386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70409935-92e6-42ff-b2f3-2c5906cb7629","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57386","PortSpecifier":{"PortValue":57386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696500,"nanos":865449484},"http":{"id":"70409935-92e6-42ff-b2f3-2c5906cb7629","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fec2228-0091-4743-9239-68d181355423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43600","PortSpecifier":{"PortValue":43600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fec2228-0091-4743-9239-68d181355423","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fec2228-0091-4743-9239-68d181355423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43600","PortSpecifier":{"PortValue":43600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696500,"nanos":899437685},"http":{"id":"1fec2228-0091-4743-9239-68d181355423","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fec2228-0091-4743-9239-68d181355423","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv\"}"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","subscription":"e2e-rate-iso-a-329124","tenant":"e2e-shared-a-7b13c8","userId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fec2228-0091-4743-9239-68d181355423","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fec2228-0091-4743-9239-68d181355423","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329124"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","selected_subscription":"e2e-rate-iso-a-329124","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-329124@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fec2228-0091-4743-9239-68d181355423","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fec2228-0091-4743-9239-68d181355423","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43602","PortSpecifier":{"PortValue":43602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43602","PortSpecifier":{"PortValue":43602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696501,"nanos":983936187},"http":{"id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv\"}"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","subscription":"e2e-rate-iso-a-329124","tenant":"e2e-shared-a-7b13c8","userId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329124"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","selected_subscription":"e2e-rate-iso-a-329124","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-329124@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43618","PortSpecifier":{"PortValue":43618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b9f007e-bf44-45de-9f29-3a80d926a524","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43618","PortSpecifier":{"PortValue":43618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696503,"nanos":32111244},"http":{"id":"2b9f007e-bf44-45de-9f29-3a80d926a524","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","subscription":"e2e-rate-iso-a-329124","tenant":"e2e-shared-a-7b13c8","userId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329124"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","selected_subscription":"e2e-rate-iso-a-329124","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-329124@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29623118-c9be-4cc7-88e5-d076597652a2","method":"POST","path":"/ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1/v1/completions","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696503,"nanos":62968817},"http":{"id":"29623118-c9be-4cc7-88e5-d076597652a2","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wi6sxFIYkXDTtAFn_FEGmvcJ8bvK5wd2vDA14Muarb0CyCsDljZpZ0b7AWuk"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wi6sxFIYkXDTtAFn_FEGmvcJ8bvK5wd2vDA14Muarb0CyCsDljZpZ0b7AWuk\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f766078f-38cd-475f-b6eb-81e684909e74","keyName":"e2e-rate-b-329124","subscription":"e2e-rate-iso-b-329124","tenant":"e2e-shared-b-e538f1","userId":"f766078f-38cd-475f-b6eb-81e684909e74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\",\"requestedSubscription\":\"e2e-rate-iso-b-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e538f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-329124","namespace":"ai-tenant-e2e-shared-b-e538f1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29623118-c9be-4cc7-88e5-d076597652a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-329124"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f766078f-38cd-475f-b6eb-81e684909e74","keyName":"e2e-rate-b-329124","selected_subscription":"e2e-rate-iso-b-329124","selected_subscription_key":"ai-tenant-e2e-shared-b-e538f1/e2e-rate-iso-b-329124@ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e538f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-329124","namespace":"ai-tenant-e2e-shared-b-e538f1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29623118-c9be-4cc7-88e5-d076597652a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29623118-c9be-4cc7-88e5-d076597652a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"info","ts":"2026-07-10T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}