--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cff4d33ff0c2497f351fe0432d75f9ac75a56dd5955e4487090386ecf94cb16f"}
{"level":"error","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"info","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"debug","ts":"2026-07-16T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"error","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"}
{"level":"error","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2"}
{"level":"error","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"}
{"level":"error","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"debug","ts":"2026-07-16T14:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7"}
{"level":"info","ts":"2026-07-16T14:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7"}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"error","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185"}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:16:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"error","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:16:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56250","PortSpecifier":{"PortValue":56250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56250","PortSpecifier":{"PortValue":56250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211377,"nanos":140525000},"http":{"id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33372f4a-0a64-4e46-a3d7-6179b2b48a0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51338","PortSpecifier":{"PortValue":51338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"296468c3-fff5-4e07-b72d-1f881e1aee75","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51338","PortSpecifier":{"PortValue":51338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211377,"nanos":198940663},"http":{"id":"296468c3-fff5-4e07-b72d-1f881e1aee75","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"296468c3-fff5-4e07-b72d-1f881e1aee75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56252","PortSpecifier":{"PortValue":56252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c669dae8-33f8-459d-9510-b52d06aba29e","method":"GET","path":"/maas-api/v1/api-keys/e332f262-7abd-4ddd-a34e-696bea03e973","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56252","PortSpecifier":{"PortValue":56252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211377,"nanos":256143113},"http":{"id":"c669dae8-33f8-459d-9510-b52d06aba29e","method":"GET","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e332f262-7abd-4ddd-a34e-696bea03e973",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e332f262-7abd-4ddd-a34e-696bea03e973",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c669dae8-33f8-459d-9510-b52d06aba29e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51344","PortSpecifier":{"PortValue":51344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","method":"GET","path":"/maas-api/v1/api-keys/60a4522b-88bd-477d-ae9a-6220791ce27a","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51344","PortSpecifier":{"PortValue":51344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211377,"nanos":299088090},"http":{"id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","method":"GET","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60a4522b-88bd-477d-ae9a-6220791ce27a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60a4522b-88bd-477d-ae9a-6220791ce27a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f1a1d4f-1798-4ed1-ac0f-1da55995121d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46516","PortSpecifier":{"PortValue":46516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46516","PortSpecifier":{"PortValue":46516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211396,"nanos":907657217},"http":{"id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fce053b2-dc5f-4f2f-98da-88d3f9b9f887","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42280","PortSpecifier":{"PortValue":42280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42280","PortSpecifier":{"PortValue":42280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211396,"nanos":955417009},"http":{"id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a23b2eb8-7ad0-49d0-92e6-d636f7478745","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46526","PortSpecifier":{"PortValue":46526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46526","PortSpecifier":{"PortValue":46526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211397,"nanos":5160179},"http":{"id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","method":"GET","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SQAoBh19mW0vXoYD_9dSEn4Vk4k1Mvrumi7jZVEfQk6VHjkuVwyK006sA8Sz"}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SQAoBh19mW0vXoYD_9dSEn4Vk4k1Mvrumi7jZVEfQk6VHjkuVwyK006sA8Sz\"}"}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1977a511-6e84-4ef7-999b-556f1e624134","keyName":"e2e-auth-iso-a-a46e5a","subscription":"e2e-auth-iso-4c27a8","tenant":"e2e-shared-a-c8253c","userId":"1977a511-6e84-4ef7-999b-556f1e624134","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4c27a8"}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa8850f-a17f-4ad1-a10b-7df5651aae62","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54980","PortSpecifier":{"PortValue":54980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54980","PortSpecifier":{"PortValue":54980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211418,"nanos":718311559},"http":{"id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcd34b11-c4bf-42d0-96d3-fa28d1c18b4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58542","PortSpecifier":{"PortValue":58542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13337124-050d-460c-ac5f-d75fc44ca5dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58542","PortSpecifier":{"PortValue":58542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211418,"nanos":764321841},"http":{"id":"13337124-050d-460c-ac5f-d75fc44ca5dd","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13337124-050d-460c-ac5f-d75fc44ca5dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58548","PortSpecifier":{"PortValue":58548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58548","PortSpecifier":{"PortValue":58548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211418,"nanos":810781146},"http":{"id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","method":"GET","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bGqlksGLjGyqOLvH_Wqsr62FIw0kxJPv7ZBJ0A9728XNiRmTbYE2xRe46ST7"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bGqlksGLjGyqOLvH_Wqsr62FIw0kxJPv7ZBJ0A9728XNiRmTbYE2xRe46ST7\"}"}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T14:16:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee5c63e8-d9f5-4d81-bc4a-d13b3020ce7e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36748","PortSpecifier":{"PortValue":36748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36748","PortSpecifier":{"PortValue":36748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211438,"nanos":303441314},"http":{"id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"139b7c3d-c080-4d12-ae6a-cf944a27eb0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49574","PortSpecifier":{"PortValue":49574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49d1036f-d2bd-4d35-ad11-567915de667a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49574","PortSpecifier":{"PortValue":49574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211438,"nanos":350170550},"http":{"id":"49d1036f-d2bd-4d35-ad11-567915de667a","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49d1036f-d2bd-4d35-ad11-567915de667a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57418","PortSpecifier":{"PortValue":57418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f03c5530-844c-48e7-a654-fc13e2d1987a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57418","PortSpecifier":{"PortValue":57418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211438,"nanos":387098149},"http":{"id":"f03c5530-844c-48e7-a654-fc13e2d1987a","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f03c5530-844c-48e7-a654-fc13e2d1987a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49584","PortSpecifier":{"PortValue":49584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49584","PortSpecifier":{"PortValue":49584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211438,"nanos":428562861},"http":{"id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d303ff-b9e9-456e-93d8-8fd02708cff1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34456","PortSpecifier":{"PortValue":34456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34456","PortSpecifier":{"PortValue":34456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211457,"nanos":991710750},"http":{"id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0666a5a7-b4c3-4622-9284-67d55190b2f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47420","PortSpecifier":{"PortValue":47420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d17229c-d31a-4bee-bc74-8807a08e133d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47420","PortSpecifier":{"PortValue":47420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211458,"nanos":31900001},"http":{"id":"9d17229c-d31a-4bee-bc74-8807a08e133d","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d17229c-d31a-4bee-bc74-8807a08e133d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","method":"GET","path":"/maas-api/v1/api-keys/1a1ee002-ec5a-45b1-8513-071d157234fd","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211458,"nanos":77585282},"http":{"id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","method":"GET","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1a1ee002-ec5a-45b1-8513-071d157234fd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1a1ee002-ec5a-45b1-8513-071d157234fd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"292eb1c1-ee14-42a4-9abe-18281a655f0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34470","PortSpecifier":{"PortValue":34470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","method":"GET","path":"/maas-api/v1/api-keys/1a1ee002-ec5a-45b1-8513-071d157234fd","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34470","PortSpecifier":{"PortValue":34470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211458,"nanos":130768144},"http":{"id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","method":"GET","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1a1ee002-ec5a-45b1-8513-071d157234fd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1a1ee002-ec5a-45b1-8513-071d157234fd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"848b45f1-cd8a-475f-9cc3-cb6798cd76db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50812","PortSpecifier":{"PortValue":50812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50812","PortSpecifier":{"PortValue":50812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211479,"nanos":773478272},"http":{"id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39a0903b-d0f9-42cd-adfe-66cea52878bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38696","PortSpecifier":{"PortValue":38696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38696","PortSpecifier":{"PortValue":38696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211479,"nanos":823920256},"http":{"id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/auth-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe378cb7-a26a-490f-836e-eb119ba0bdde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50824","PortSpecifier":{"PortValue":50824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50824","PortSpecifier":{"PortValue":50824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211479,"nanos":868868750},"http":{"id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MBvmSfV7Vn0J7q56_4RYul5b61qbTkRPqGtaj4KQlnC68GKCjEhWKKnEneZM"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MBvmSfV7Vn0J7q56_4RYul5b61qbTkRPqGtaj4KQlnC68GKCjEhWKKnEneZM\"}"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f6b299a5-40e3-43d1-9555-da66f0ec4735","keyName":"e2e-auth-iso-a-8916c8","subscription":"e2e-auth-iso-fc4abb","tenant":"e2e-shared-a-c8253c","userId":"f6b299a5-40e3-43d1-9555-da66f0ec4735","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/auth-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-fc4abb"}
{"level":"info","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:17:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51150fbc-56bb-4c37-98d1-1f7a13eb69d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0cf32fadc6fa9ab1055711bf920f813da547f3ea57d2399105ee20c1bbb7b07"}
{"level":"info","ts":"2026-07-16T14:18:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90f1948416337f8aaa453d16eaaf495237f7c81c81695e974415375996e235df"}
{"level":"info","ts":"2026-07-16T14:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90328bc3202304062d937dbb19c5f118104c2c60d44cbb0ef89e5d9e759b06e7"}
{"level":"info","ts":"2026-07-16T14:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cfd29cea949935366ac71c7d788020e0d0327e1175246c50eb721721eca61f8"}
{"level":"info","ts":"2026-07-16T14:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd6c784005c9a3e4be210648932adf9bae414da0348341a7d8e6487606dabd6f"}
{"level":"info","ts":"2026-07-16T14:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3e70d641e76b73eb226d0521c769cafdd9ea1de6b270bd46db5d8385a87ffb2"}
{"level":"info","ts":"2026-07-16T14:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cff4d33ff0c2497f351fe0432d75f9ac75a56dd5955e4487090386ecf94cb16f"}
{"level":"info","ts":"2026-07-16T14:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64e1a4e442b1a775fb02664be45fedc8bb27b20a0b67b06ecc21c2dd5947e5b8"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce"}
{"level":"debug","ts":"2026-07-16T14:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"error","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12d5c1968177d0650adb2296590053b38d91a5178ef7a2860c5838b9eee5bb89"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/288a5e7c91be13bbddc6e908ef7bcc6eb4475975f8668b71af6392726000d7d7"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/051a7f81bff33df9fe005c99587a294dc235131ba51c03f65088d128b1592d83"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fc98e06bd81fed004f1976d555e66591060537b5f38c565004eb2b43e6c2338"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5b42acd2ce91d6047b017c74ebf076a2b80ed76d5b2d1efcefb8a2b35daa855"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12aeee1172fd8da1eb66db38625f010e9772a4175a0827941a289e576ae0b689"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/833f6587643789fdb88696046f6e02fcd329d8dbc2424cd32ca60a0098798a42"}
{"level":"info","ts":"2026-07-16T14:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90c05f154196927da41cc204e61853a8bb53b25831289f96df53a054889c0993"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a"}
{"level":"error","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5"}
{"level":"error","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566"}
{"level":"error","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"error","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:18:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:18:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"info","ts":"2026-07-16T14:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"error","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"info","ts":"2026-07-16T14:19:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38044","PortSpecifier":{"PortValue":38044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38044","PortSpecifier":{"PortValue":38044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211545,"nanos":216342590},"http":{"id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/sub-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5ed2cbb-4d52-4d27-9084-e16ecfae25aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45634","PortSpecifier":{"PortValue":45634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45634","PortSpecifier":{"PortValue":45634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211545,"nanos":258662244},"http":{"id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/sub-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d20b7c-00ab-44fc-a8ea-b0a336147fb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38052","PortSpecifier":{"PortValue":38052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38052","PortSpecifier":{"PortValue":38052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211545,"nanos":302403122},"http":{"id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","method":"GET","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Pft8NhREXpZsOrHx_luseI63nBqSiSLnEFalFfpvr4YNcUO5GdlHhBmNZztf"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Pft8NhREXpZsOrHx_luseI63nBqSiSLnEFalFfpvr4YNcUO5GdlHhBmNZztf\"}"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1c514288-6a9d-4176-9d7f-4a68d7301a3e","keyName":"e2e-sub-iso-9da2e9","subscription":"e2e-a-only-f6bd4e","tenant":"e2e-shared-a-c8253c","userId":"1c514288-6a9d-4176-9d7f-4a68d7301a3e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/sub-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f6bd4e"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55a50e91-d2f4-4987-8386-aeb4f1accaa8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9885e555-3c3c-47bc-b915-7d359565420d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9885e555-3c3c-47bc-b915-7d359565420d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9885e555-3c3c-47bc-b915-7d359565420d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45640","PortSpecifier":{"PortValue":45640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211545,"nanos":345608557},"http":{"id":"9885e555-3c3c-47bc-b915-7d359565420d","method":"GET","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15JiHtwJv97UyOp4F_yZ6dpqeWANDsX8hRSd0yPdCohVbZvUJ4YkqG1YWzO4X"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15JiHtwJv97UyOp4F_yZ6dpqeWANDsX8hRSd0yPdCohVbZvUJ4YkqG1YWzO4X\"}"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9da6b8ca-4929-4038-b25e-68d5a692f34e","keyName":"e2e-sub-iso-063920","subscription":"e2e-b-only-f6bd4e","tenant":"e2e-shared-b-1f53bd","userId":"9da6b8ca-4929-4038-b25e-68d5a692f34e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9885e555-3c3c-47bc-b915-7d359565420d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/sub-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f6bd4e"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9885e555-3c3c-47bc-b915-7d359565420d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9885e555-3c3c-47bc-b915-7d359565420d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9885e555-3c3c-47bc-b915-7d359565420d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33930","PortSpecifier":{"PortValue":33930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33930","PortSpecifier":{"PortValue":33930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211566,"nanos":433781177},"http":{"id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/sub-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54931cfb-d4dc-4a04-92bf-7489aeb7e1ee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51878","PortSpecifier":{"PortValue":51878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51878","PortSpecifier":{"PortValue":51878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211566,"nanos":477510769},"http":{"id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/sub-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"055afa6c-8a63-4b39-977a-dfe7ac24e8d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33932","PortSpecifier":{"PortValue":33932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33932","PortSpecifier":{"PortValue":33932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211566,"nanos":517599374},"http":{"id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u9CejQ7cIH1KJqBX_w2dzrsV2jTefGNTEsjaowFIXlhfLhZ0NULZyYOTqxyQ"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u9CejQ7cIH1KJqBX_w2dzrsV2jTefGNTEsjaowFIXlhfLhZ0NULZyYOTqxyQ\"}"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"604396bd-4958-4c14-b900-5978a5d6e9fb","keyName":"e2e-sub-iso-1d6c12","subscription":"e2e-shared-sub-23c6e8","tenant":"e2e-shared-a-c8253c","userId":"604396bd-4958-4c14-b900-5978a5d6e9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/sub-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-23c6e8"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc903a6f-b887-48bc-afad-1b2eaf924fb2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51892","PortSpecifier":{"PortValue":51892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51892","PortSpecifier":{"PortValue":51892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211566,"nanos":551895497},"http":{"id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aOxMC9ly6lWOkO4K_kvkUpovfHYJP1EV8XSKLKxjipgF4455Oekp8yPIOFRZ"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-aOxMC9ly6lWOkO4K_kvkUpovfHYJP1EV8XSKLKxjipgF4455Oekp8yPIOFRZ\"}"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bbde658-6688-49b9-9da5-53907e74f7ea","keyName":"e2e-sub-iso-85ed89","subscription":"e2e-shared-sub-23c6e8","tenant":"e2e-shared-b-1f53bd","userId":"4bbde658-6688-49b9-9da5-53907e74f7ea","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/sub-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-23c6e8"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:19:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f175e5-1a06-4c6e-aea5-a98d7f2baa2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2414a922c320402d8629e1af70abba5e705f20d475ad8ff204489ceecb178b6e"}
{"level":"info","ts":"2026-07-16T14:19:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d458dbd810157e3091985a03301b7d5a868ad1a7b8e3e7d434b6f444a10288ce"}
{"level":"info","ts":"2026-07-16T14:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37f6a227413da26aca17c5f36f4def31e3e147ef940ccfcaea61011c6b3da5da"}
{"level":"info","ts":"2026-07-16T14:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ad470f6190ef6431665fd316b80b727e74879c02f7c2343f3633c73a6bcb2ff"}
{"level":"info","ts":"2026-07-16T14:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80ec0b026f381c3c3b57176344c9eeda2130c3eb797d88bf1a0c839fbd09e7c9"}
{"level":"info","ts":"2026-07-16T14:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71908ea8419da5a1d40257bd64321cf7b6d863135af4313082b90f4ca0dc8ead"}
{"level":"info","ts":"2026-07-16T14:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2827bb29d517c021878108a8990b45f4630e667fefb10b931b840d76524e4f22"}
{"level":"info","ts":"2026-07-16T14:19:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97cadceaab23839e10fa35a81c91d6a4b6cc393fca6a613fd5539875558350c8"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"debug","ts":"2026-07-16T14:19:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/913e45cfca24f058c0a8b8c9f81da7df3e55080eedb385a891ac05b3bd34d7a5"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de2cdc1f2e2cf1a79aa3ead1fa5a53efc5acce59ad8e3a49d485bc7dc8de6566"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daa050becd960cbc16ce798e3b579ab33f1d5d76d37703e89939288af904400a"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40e6e8defa039259ff3fb94bb523edc969f3233786e713f16305ee069dc72cc7"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38832cf38b454c2c38ca080c85f8e26912a981743773bbcfc0d255e9c1d0aa0b"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ae9c41016c8b78b53d92d69c0049f4d1d1ff1665cd3958516ad25c5e84a8e45"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56bad7b9fe97474b3f81423a74262c375e536fdec86b362c6232fbea10430ad8"}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:19:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:19:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e3832b1deff5a7796ccdc8eba4eb5e31aff5ed386bc06834014ea6a6d7e226e"}
{"level":"debug","ts":"2026-07-16T14:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"error","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"error","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"info","ts":"2026-07-16T14:20:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b"}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9a3846686593fe2a12cfe11deeb03bace274ab3368b03e041d08c636dfe5b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"}
{"level":"debug","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T14:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"debug","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43532fda8ad3f78d71020cbed0b9dec60905b22373b7aad69a409e9d9cd1d185"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9749851bc6922bb3de41f15d30512cb195b4a366833b68700d1ec2002008a70"}
{"level":"info","ts":"2026-07-16T14:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"}
{"level":"info","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35444","PortSpecifier":{"PortValue":35444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35444","PortSpecifier":{"PortValue":35444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211639,"nanos":498665318},"http":{"id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67d0209b-59d0-4f94-8b9c-e32291d2b2fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55988","PortSpecifier":{"PortValue":55988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d81e2464-26c6-454e-a91d-c1eada70956f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55988","PortSpecifier":{"PortValue":55988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211639,"nanos":561825735},"http":{"id":"d81e2464-26c6-454e-a91d-c1eada70956f","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d81e2464-26c6-454e-a91d-c1eada70956f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35450","PortSpecifier":{"PortValue":35450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","method":"POST","path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35450","PortSpecifier":{"PortValue":35450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211639,"nanos":620080880},"http":{"id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JEgtNV9h90KinZkg_BVPLaBw8vkZ87v2kwtW9Hp7kD1EFvaDIrzmyAGNXe4c"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JEgtNV9h90KinZkg_BVPLaBw8vkZ87v2kwtW9Hp7kD1EFvaDIrzmyAGNXe4c\"}"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","keyName":"e2e-rate-a-acb5ce","subscription":"e2e-rate-iso-a-acb5ce","tenant":"e2e-shared-a-c8253c","userId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\",\"requestedSubscription\":\"e2e-rate-iso-a-acb5ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-acb5ce","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-acb5ce"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","keyName":"e2e-rate-a-acb5ce","selected_subscription":"e2e-rate-iso-a-acb5ce","selected_subscription_key":"ai-tenant-e2e-shared-a-c8253c/e2e-rate-iso-a-acb5ce@ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-acb5ce","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e300b46d-2ef8-4733-b8d3-81ee02956dd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35458","PortSpecifier":{"PortValue":35458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","method":"POST","path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35458","PortSpecifier":{"PortValue":35458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211640,"nanos":689009846},"http":{"id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JEgtNV9h90KinZkg_BVPLaBw8vkZ87v2kwtW9Hp7kD1EFvaDIrzmyAGNXe4c"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JEgtNV9h90KinZkg_BVPLaBw8vkZ87v2kwtW9Hp7kD1EFvaDIrzmyAGNXe4c\"}"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","keyName":"e2e-rate-a-acb5ce","subscription":"e2e-rate-iso-a-acb5ce","tenant":"e2e-shared-a-c8253c","userId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\",\"requestedSubscription\":\"e2e-rate-iso-a-acb5ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-acb5ce","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-acb5ce"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","keyName":"e2e-rate-a-acb5ce","selected_subscription":"e2e-rate-iso-a-acb5ce","selected_subscription_key":"ai-tenant-e2e-shared-a-c8253c/e2e-rate-iso-a-acb5ce@ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-acb5ce","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce414b3b-2ab4-4a6d-b903-491fb5ae13ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35472","PortSpecifier":{"PortValue":35472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","method":"POST","path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35472","PortSpecifier":{"PortValue":35472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211641,"nanos":732220062},"http":{"id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JEgtNV9h90KinZkg_BVPLaBw8vkZ87v2kwtW9Hp7kD1EFvaDIrzmyAGNXe4c"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JEgtNV9h90KinZkg_BVPLaBw8vkZ87v2kwtW9Hp7kD1EFvaDIrzmyAGNXe4c\"}"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","keyName":"e2e-rate-a-acb5ce","subscription":"e2e-rate-iso-a-acb5ce","tenant":"e2e-shared-a-c8253c","userId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\",\"requestedSubscription\":\"e2e-rate-iso-a-acb5ce\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-acb5ce","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-acb5ce"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3bde3dbc-e39c-41e0-8444-d3b64280b480","keyName":"e2e-rate-a-acb5ce","selected_subscription":"e2e-rate-iso-a-acb5ce","selected_subscription_key":"ai-tenant-e2e-shared-a-c8253c/e2e-rate-iso-a-acb5ce@ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-acb5ce","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ef3825b-ee0c-48de-96f2-2fe26d8e25bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48482","PortSpecifier":{"PortValue":48482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48482","PortSpecifier":{"PortValue":48482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211657,"nanos":83003365},"http":{"id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3ec2d96-5851-4e21-ad3a-1bf630633645","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35416","PortSpecifier":{"PortValue":35416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35416","PortSpecifier":{"PortValue":35416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211657,"nanos":133334469},"http":{"id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90806270-e286-4c2b-bac1-ab057494ae60","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"]}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8e8d61ab4f06"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bb81ad0a-b48d-470e-9452-17971472c4f0"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90806270-e286-4c2b-bac1-ab057494ae60","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1ec77fc752980bd6bbfda1934d0b046bf0571d07f5c201584c9a4d0ecc42bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6824c68f-ba57-4ff8-82ee-83ad01b02a3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48488","PortSpecifier":{"PortValue":48488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","method":"POST","path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48488","PortSpecifier":{"PortValue":48488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211657,"nanos":169411025},"http":{"id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sroIkBcnrtYlC3NF_Tkra74vXsByvxF1HWzGPtxxjgXQQ7yNUGaCxLhNIy5G"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sroIkBcnrtYlC3NF_Tkra74vXsByvxF1HWzGPtxxjgXQQ7yNUGaCxLhNIy5G\"}"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","keyName":"e2e-rate-a-dffeaf","subscription":"e2e-rate-iso-a-dffeaf","tenant":"e2e-shared-a-c8253c","userId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\",\"requestedSubscription\":\"e2e-rate-iso-a-dffeaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dffeaf","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dffeaf"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","keyName":"e2e-rate-a-dffeaf","selected_subscription":"e2e-rate-iso-a-dffeaf","selected_subscription_key":"ai-tenant-e2e-shared-a-c8253c/e2e-rate-iso-a-dffeaf@ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dffeaf","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b99f4b26-48b0-41c5-aa2f-c0426c79e32d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","method":"POST","path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48504","PortSpecifier":{"PortValue":48504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211658,"nanos":213425131},"http":{"id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sroIkBcnrtYlC3NF_Tkra74vXsByvxF1HWzGPtxxjgXQQ7yNUGaCxLhNIy5G"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sroIkBcnrtYlC3NF_Tkra74vXsByvxF1HWzGPtxxjgXQQ7yNUGaCxLhNIy5G\"}"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","keyName":"e2e-rate-a-dffeaf","subscription":"e2e-rate-iso-a-dffeaf","tenant":"e2e-shared-a-c8253c","userId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\",\"requestedSubscription\":\"e2e-rate-iso-a-dffeaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dffeaf","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dffeaf"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","keyName":"e2e-rate-a-dffeaf","selected_subscription":"e2e-rate-iso-a-dffeaf","selected_subscription_key":"ai-tenant-e2e-shared-a-c8253c/e2e-rate-iso-a-dffeaf@ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dffeaf","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebe3ab39-928e-4f1b-a87d-4a99cdaf9685","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55810","PortSpecifier":{"PortValue":55810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79495aca-5fbc-4994-9196-df0f5eaed919","method":"POST","path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions","host":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55810","PortSpecifier":{"PortValue":55810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211659,"nanos":254356913},"http":{"id":"79495aca-5fbc-4994-9196-df0f5eaed919","method":"POST","headers":{":authority":"e2e-shared-a-c8253c.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sroIkBcnrtYlC3NF_Tkra74vXsByvxF1HWzGPtxxjgXQQ7yNUGaCxLhNIy5G"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sroIkBcnrtYlC3NF_Tkra74vXsByvxF1HWzGPtxxjgXQQ7yNUGaCxLhNIy5G\"}"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","keyName":"e2e-rate-a-dffeaf","subscription":"e2e-rate-iso-a-dffeaf","tenant":"e2e-shared-a-c8253c","userId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\",\"requestedSubscription\":\"e2e-rate-iso-a-dffeaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c8253c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dffeaf","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-c8253c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dffeaf"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d49c6bb6-0963-4d4a-9f3c-2863dee7d443","keyName":"e2e-rate-a-dffeaf","selected_subscription":"e2e-rate-iso-a-dffeaf","selected_subscription_key":"ai-tenant-e2e-shared-a-c8253c/e2e-rate-iso-a-dffeaf@ai-tenant-e2e-shared-a-c8253c/rate-test-model-c8253c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c8253c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dffeaf","namespace":"ai-tenant-e2e-shared-a-c8253c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79495aca-5fbc-4994-9196-df0f5eaed919","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41526","PortSpecifier":{"PortValue":41526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b5506cd-c433-4911-9c73-4128abba91fd","method":"POST","path":"/ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd/v1/completions","host":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41526","PortSpecifier":{"PortValue":41526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784211659,"nanos":292519993},"http":{"id":"6b5506cd-c433-4911-9c73-4128abba91fd","method":"POST","headers":{":authority":"e2e-shared-b-1f53bd.apps.9df67c88-5b11-4d38-9c76-8e8d61ab4f06.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15i4y91eLzimTdzRf_GdqGzMGcheLmdR72VSR7DfnXdR8FBbn2EsVgzMSzj2j"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15i4y91eLzimTdzRf_GdqGzMGcheLmdR72VSR7DfnXdR8FBbn2EsVgzMSzj2j\"}"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"33312890-c7a1-4718-abbe-ecb131f0095f","keyName":"e2e-rate-b-dffeaf","subscription":"e2e-rate-iso-b-dffeaf","tenant":"e2e-shared-b-1f53bd","userId":"33312890-c7a1-4718-abbe-ecb131f0095f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd\",\"requestedSubscription\":\"e2e-rate-iso-b-dffeaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1f53bd.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1f53bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dffeaf","namespace":"ai-tenant-e2e-shared-b-1f53bd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1f53bd/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-dffeaf"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"33312890-c7a1-4718-abbe-ecb131f0095f","keyName":"e2e-rate-b-dffeaf","selected_subscription":"e2e-rate-iso-b-dffeaf","selected_subscription_key":"ai-tenant-e2e-shared-b-1f53bd/e2e-rate-iso-b-dffeaf@ai-tenant-e2e-shared-b-1f53bd/rate-test-model-1f53bd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1f53bd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-dffeaf","namespace":"ai-tenant-e2e-shared-b-1f53bd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T14:20:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b5506cd-c433-4911-9c73-4128abba91fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85635432164ef54a4eff4c41b4a9f8f6f38b00c9c6033828f69c9b2d6bf53763"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d01e0884d3897fa334d3251a029b8917f3614e58796a2d2c6bcfad05bd92cae"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25a33dd73858c338fd577d790ae38f49bb60acf720c2d3320233c6fad0f52a25"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46f4e23823cd728ee384ee9fd32ce84eab0e216de2bde478a7951a73bca3372b"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03aaf4ac245363ba6f7e0f64d3f1f227bd1cbad445c51852a50680c34cb478ba"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af47ad6cc7ba09254f9031313f2e8d5eed31ccba40b47c2620b7f3f6ddf09a0b"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/645818ac1b318c144bc7328f9806fe8281b1b06c07126bf43f5d342eb5e16e59"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4410ea8e2306c13dd3501e43d7477e9ed4601fd52e740a5f9e32f8f7a9ad5814"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5c0c8e37d004c37eaa76a17ed021456927decfffa365efb925bcb10cf061c3d"}
{"level":"info","ts":"2026-07-16T14:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6188426e54c2d7b265f3e6bc2dfd1beebbe65abe76349ef4e810a80ac7926f8e"}
{"level":"info","ts":"2026-07-16T14:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db05fc88d5cd8276215ed1000cc696e20522e3f195295f029f7ab0812ef353ac"}
{"level":"info","ts":"2026-07-16T14:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05f812c9515c406daa383491174c5285071365fb9b49ce4cdaa7d0ffe48dbb81"}
{"level":"info","ts":"2026-07-16T14:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e650fbfcb50eb13420ff081fc052da0e80a53dec65107d5a820b40e8a1eea24"}
{"level":"info","ts":"2026-07-16T14:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1b53d859d41d2bc07acb9ec14833f8fa2d1461fadd884b942d57d2618fa361e"}
{"level":"info","ts":"2026-07-16T14:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3a322c7771049d23b7a567b0e1298e13cdcab94c9d76452a302868a881ea5b4"}
{"level":"info","ts":"2026-07-16T14:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccd9dddd4c54a68f16d8593d7583495e9e62dd56085c609f8a47aa4c115af2ae"}
{"level":"info","ts":"2026-07-16T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d25192bd6cac94e3c4632b3856cb01eca3dca59f70a894b55e01ef3b8847d422"}
{"level":"info","ts":"2026-07-16T14:21:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04411744ca98e45e60206757865ba36e6b37325b7d753e933a0be8538dbd1751"}
{"level":"info","ts":"2026-07-16T14:21:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3025037d246ce1bf330ca09c7601f003600a80504eb05b48bea4bf6ef1d981b2"}
{"level":"info","ts":"2026-07-16T14:21:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfcf2d6aa70a029f425935389e3b91b5781c34a47cda4d46ad8f84e373c4a198"}