--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44502","PortSpecifier":{"PortValue":44502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44502","PortSpecifier":{"PortValue":44502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198026,"nanos":878152983},"http":{"id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/auth-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9cde1ca-3f42-49e8-9daa-5a99beb6f465","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41548","PortSpecifier":{"PortValue":41548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41548","PortSpecifier":{"PortValue":41548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198026,"nanos":917317642},"http":{"id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/auth-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce0eb565-8f4f-4c0d-ab8e-62cddabb9d5f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44518","PortSpecifier":{"PortValue":44518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23ef4f83-e4cd-4781-8efa-38e070864e90","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:44518","PortSpecifier":{"PortValue":44518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198026,"nanos":965643520},"http":{"id":"23ef4f83-e4cd-4781-8efa-38e070864e90","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/auth-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:20:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23ef4f83-e4cd-4781-8efa-38e070864e90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41562","PortSpecifier":{"PortValue":41562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41562","PortSpecifier":{"PortValue":41562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198027,"nanos":2143810},"http":{"id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/auth-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:20:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8237ca64-b13e-4d79-b252-ee4f6128dabb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:20:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"debug","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"error","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"error","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"error","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:20:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:20:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48562","PortSpecifier":{"PortValue":48562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48562","PortSpecifier":{"PortValue":48562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198067,"nanos":35482041},"http":{"id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/auth-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd6ab634-bef1-435b-93ff-e5f07ef379ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58364","PortSpecifier":{"PortValue":58364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58364","PortSpecifier":{"PortValue":58364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198067,"nanos":75111435},"http":{"id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/auth-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52e2a434-0753-4e0a-85ca-0d7bd257634f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17c8505-04b6-467b-910d-0074807d25d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c17c8505-04b6-467b-910d-0074807d25d7","method":"GET","path":"/maas-api/v1/api-keys/f79b798f-03af-4055-8c29-691d5403352b","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c17c8505-04b6-467b-910d-0074807d25d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198067,"nanos":120746982},"http":{"id":"c17c8505-04b6-467b-910d-0074807d25d7","method":"GET","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f79b798f-03af-4055-8c29-691d5403352b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c17c8505-04b6-467b-910d-0074807d25d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c17c8505-04b6-467b-910d-0074807d25d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f79b798f-03af-4055-8c29-691d5403352b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/auth-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c17c8505-04b6-467b-910d-0074807d25d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17c8505-04b6-467b-910d-0074807d25d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c17c8505-04b6-467b-910d-0074807d25d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48564","PortSpecifier":{"PortValue":48564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","method":"GET","path":"/maas-api/v1/api-keys/f79b798f-03af-4055-8c29-691d5403352b","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:48564","PortSpecifier":{"PortValue":48564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198067,"nanos":155422766},"http":{"id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","method":"GET","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f79b798f-03af-4055-8c29-691d5403352b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f79b798f-03af-4055-8c29-691d5403352b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/auth-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef80ed57-2f70-4968-ad91-7605b3d6ce9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:21:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"error","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:21:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:21:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2800b1df-145c-494b-b292-4e09189e08dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58876","PortSpecifier":{"PortValue":58876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2800b1df-145c-494b-b292-4e09189e08dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2800b1df-145c-494b-b292-4e09189e08dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58876","PortSpecifier":{"PortValue":58876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198105,"nanos":139435612},"http":{"id":"2800b1df-145c-494b-b292-4e09189e08dc","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2800b1df-145c-494b-b292-4e09189e08dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2800b1df-145c-494b-b292-4e09189e08dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/auth-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2800b1df-145c-494b-b292-4e09189e08dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2800b1df-145c-494b-b292-4e09189e08dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2800b1df-145c-494b-b292-4e09189e08dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:46390","PortSpecifier":{"PortValue":46390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198105,"nanos":176778157},"http":{"id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/auth-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f415cbea-ff30-48d8-b9ee-fc568eeabc90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58880","PortSpecifier":{"PortValue":58880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58880","PortSpecifier":{"PortValue":58880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198105,"nanos":214111706},"http":{"id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9eQavdFe3zDXM3Lw_7FwdBIkM31ODi0eIMFDdEbKQIPewCEGujR3lLuUXfiq"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9eQavdFe3zDXM3Lw_7FwdBIkM31ODi0eIMFDdEbKQIPewCEGujR3lLuUXfiq\"}"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88fe273b-74c8-444c-8072-0413b5e73b79","keyName":"e2e-auth-iso-a-600405","subscription":"e2e-auth-iso-025f1a","tenant":"e2e-shared-a-328ef1","userId":"88fe273b-74c8-444c-8072-0413b5e73b79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/auth-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-025f1a"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:21:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba832ef0-8116-4da3-ae9b-d697261f1b43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f65dcd9b0356227a1b23c3af417045b646083094c2881a5b54a757c0501d521"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0c3c563da92d5e15f8a1507921441b1fb8d6101a10d1418240f6ef017eadac6"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f6983d59f755a3d588522c0372392100386eea2bb5dbcc6d73c60e8bb3ea8dc"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:21:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/585fcd9997e69805dd91e402d1d4e5f96f0a970091e6c6fd3000d3429930ea16"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f63980a3d85d6f4d69a39a5bac5d6e7795bba28c3d8c5d4cdebc03187d4a192"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f79bbcf423d019a351614ae225b9efc354a31a669fe8c46f470ac95234241eab"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04fbf64628c2e1fc11c4bc2ee2c78b9e8545e6c0f6b20bb0d458a962f10e51a7"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4069cecebb7804d4d126aaf25ee9943708a928ee027650c8cbee1f353eef28d4"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834c7033fd1674008f75b8912e43f4c5cd13d44fcaec7110f00baf404a143f5b"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcafbbf419c23cc0ad2bea588f194b35099efd2b077d82c946017c05e7dca563"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcaa8d064dbe993bbc81bd84d03aa2fbce094b43b312d3f12ac28e91da2d49d5"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6dcbd7c70a1910f610cb3c979636c84c99334378c7811e26db77cee96f0307e"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71463b446821bf8a0b135840fe86113a7c50dda73017ba84885cd59dd6ea7fa2"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/574bb185df0cf5409e78667f84f31ff6297b576f4c648c3409db1c0dec55a9c7"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5d4ccd98cf7cf85e05e56c3fcfd9cd88b62708e6180a548ba34a6fd2a0c24a2"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ec9adc34efb6da1bc7934e37f5421dd92815ab6c039b8f08d23175bf01a4c7"}
{"level":"info","ts":"2026-07-28T00:21:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"error","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"error","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:22:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:22:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59526","PortSpecifier":{"PortValue":59526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59526","PortSpecifier":{"PortValue":59526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198179,"nanos":644620936},"http":{"id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/sub-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9f153f3-7c6c-4971-80be-59ff5eaf0e0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35172","PortSpecifier":{"PortValue":35172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198179,"nanos":690532750},"http":{"id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/sub-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c05f9432-fa97-4f54-b72b-c1b1b2704cc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59532","PortSpecifier":{"PortValue":59532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a615270-7dad-4e17-add6-78ae30fcd844","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59532","PortSpecifier":{"PortValue":59532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198179,"nanos":725551783},"http":{"id":"6a615270-7dad-4e17-add6-78ae30fcd844","method":"GET","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NDdNBTFIUcD8dv4Z_x9Hw0rXWRm9U3ADqJQDbrkXzTG3to4JA8gtxkAuU3Ub"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NDdNBTFIUcD8dv4Z_x9Hw0rXWRm9U3ADqJQDbrkXzTG3to4JA8gtxkAuU3Ub\"}"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"324615e4-96ca-4639-8560-f94fadb111a7","keyName":"e2e-sub-iso-152889","subscription":"e2e-a-only-25b484","tenant":"e2e-shared-a-328ef1","userId":"324615e4-96ca-4639-8560-f94fadb111a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/sub-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-25b484"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a615270-7dad-4e17-add6-78ae30fcd844","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35184","PortSpecifier":{"PortValue":35184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:35184","PortSpecifier":{"PortValue":35184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198179,"nanos":766458322},"http":{"id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","method":"GET","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IUoJABf9E0TXOeQ2_dEYWXc4TQm7ukmMSHrssnjRSPHvK1bx5mhEm2U6pvY2"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IUoJABf9E0TXOeQ2_dEYWXc4TQm7ukmMSHrssnjRSPHvK1bx5mhEm2U6pvY2\"}"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"922b18df-5a2f-44c3-80c1-2071564dbdba","keyName":"e2e-sub-iso-7a0efe","subscription":"e2e-b-only-25b484","tenant":"e2e-shared-b-6e175a","userId":"922b18df-5a2f-44c3-80c1-2071564dbdba","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/sub-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-25b484"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:22:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce8513d1-bd8d-4399-83e2-87fb7f915354","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"error","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:23:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:23:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58472","PortSpecifier":{"PortValue":58472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc093d5b-095a-43e4-afc0-46e4862d5063","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58472","PortSpecifier":{"PortValue":58472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198212,"nanos":820090019},"http":{"id":"dc093d5b-095a-43e4-afc0-46e4862d5063","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/sub-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc093d5b-095a-43e4-afc0-46e4862d5063","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38332","PortSpecifier":{"PortValue":38332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"737cc307-0097-4443-aa5e-b0eb8ca53064","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38332","PortSpecifier":{"PortValue":38332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198212,"nanos":869285326},"http":{"id":"737cc307-0097-4443-aa5e-b0eb8ca53064","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/sub-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"737cc307-0097-4443-aa5e-b0eb8ca53064","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58488","PortSpecifier":{"PortValue":58488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e367cebc-6152-4733-9e2c-135c9dfd2851","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58488","PortSpecifier":{"PortValue":58488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198212,"nanos":912891298},"http":{"id":"e367cebc-6152-4733-9e2c-135c9dfd2851","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EygKKK1Myijft1ja_2Kpy6RIttwxcVFSVTzCZPsfHcefUCXU7bzqbqSNUfgD"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EygKKK1Myijft1ja_2Kpy6RIttwxcVFSVTzCZPsfHcefUCXU7bzqbqSNUfgD\"}"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79af66bd-2584-4587-878e-0f28668393d0","keyName":"e2e-sub-iso-56e0f4","subscription":"e2e-shared-sub-2a564d","tenant":"e2e-shared-a-328ef1","userId":"79af66bd-2584-4587-878e-0f28668393d0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/sub-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2a564d"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e367cebc-6152-4733-9e2c-135c9dfd2851","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38334","PortSpecifier":{"PortValue":38334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38334","PortSpecifier":{"PortValue":38334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198212,"nanos":952389881},"http":{"id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17nTyErxykLccNK0L_agqNhVo6EpNQePxGgdgDoW94FIzFnqTatohc1yZ1EEo"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17nTyErxykLccNK0L_agqNhVo6EpNQePxGgdgDoW94FIzFnqTatohc1yZ1EEo\"}"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"23da9c33-a02d-4ce6-a2df-92b1a7cace5a","keyName":"e2e-sub-iso-9e3647","subscription":"e2e-shared-sub-2a564d","tenant":"e2e-shared-b-6e175a","userId":"23da9c33-a02d-4ce6-a2df-92b1a7cace5a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/sub-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-2a564d"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:23:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c75f97-c326-42b0-aa83-cb7cfdcd0640","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f7e5bb8c7504cf300e31d2f0a608297fe89c7108b2364a4a37197ea9b661a88"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de326e01249dcc72b7e78f362fb04652199b6eeee365d8f33b89d9624eb8d989"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7e55a624447b1a1a0f5ad481c52c5a8496f5c71b1c77a298a672e7d4190b23f"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ba5fcb04a1ab6b2f1c7f2c60e78d2aaa60f83eba147b8227dff43b3cea044b2"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b74cbe552709944e3c213ca53070b7e6fd8e016f00fb7044352f01c8062acbf6"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c007678f71a9a730e2c391b9836e0646fbe934c2c87cd98aac7c91d83cea4211"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3baa8ea37d6333cfca9dae2be2d13d4e3f206a7e4a2bac4ead640f798da565db"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:23:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/affcaf3a71dfca0b2d6a6b0e5d4c7dc1f43947a98cc77cd7318f79d46f6dcca0"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d046b32252ee3f7440fe0b0cf3d141cafc71227107e744b1315acd4bcb40f2d8"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0d9c707fc28f36e7e69fd05591cf0ac4ff2b18b1baeca2aa40b527d296687a1"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e48af025f9d08121675ab2cd960d2fe5eca1356e98c7118575702e054b30d8f4"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc37e9dc5b20e7029e385d2abbb07355ed892f7ae15fc811dc2adf661fe2de57"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35c0f951c82efa31237a6562ddc9515c8d97ce81424d7a5ac1666c48fb5a3044"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af8f5ef1c86011c9f259cfede74a8b7d288c971d7f24ffa11d448cb7b08435b"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/359f60f125238b27ac00c5324bf53f51f54815f294f24815628b191718224168"}
{"level":"info","ts":"2026-07-28T00:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b14c7319c5c57d138b5d2f401e91b6b3ad98f8f0c62e66ef84ffff62883f32fa"}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca"}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca"}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6"}
{"level":"error","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f"}
{"level":"error","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d"}
{"level":"debug","ts":"2026-07-28T00:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268"}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738"}
{"level":"info","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52544","PortSpecifier":{"PortValue":52544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198312,"nanos":461284009},"http":{"id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a9a2cae-0ac3-44c2-a12d-8aa129c838f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36442","PortSpecifier":{"PortValue":36442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36442","PortSpecifier":{"PortValue":36442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198312,"nanos":514436684},"http":{"id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3069d1a2-e86c-44dc-b0b7-cc23434395a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52560","PortSpecifier":{"PortValue":52560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52560","PortSpecifier":{"PortValue":52560}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198312,"nanos":559708987},"http":{"id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7RJncZhc0Tg0Z53m_2y9GnxYHUDs11LpMCWNve3NKu0OtftMTlNVztwtFnQg"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7RJncZhc0Tg0Z53m_2y9GnxYHUDs11LpMCWNve3NKu0OtftMTlNVztwtFnQg\"}"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a57fe096-7c8a-458a-9209-dd484656490a","keyName":"e2e-rate-a-3323b5","subscription":"e2e-rate-iso-a-3323b5","tenant":"e2e-shared-a-328ef1","userId":"a57fe096-7c8a-458a-9209-dd484656490a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-3323b5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3323b5","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3323b5"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a57fe096-7c8a-458a-9209-dd484656490a","keyName":"e2e-rate-a-3323b5","selected_subscription":"e2e-rate-iso-a-3323b5","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-3323b5@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3323b5","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd5ee1ff-9208-453d-a0b7-0d199669b1a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52564","PortSpecifier":{"PortValue":52564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52564","PortSpecifier":{"PortValue":52564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198313,"nanos":653470978},"http":{"id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7RJncZhc0Tg0Z53m_2y9GnxYHUDs11LpMCWNve3NKu0OtftMTlNVztwtFnQg"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7RJncZhc0Tg0Z53m_2y9GnxYHUDs11LpMCWNve3NKu0OtftMTlNVztwtFnQg\"}"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a57fe096-7c8a-458a-9209-dd484656490a","keyName":"e2e-rate-a-3323b5","subscription":"e2e-rate-iso-a-3323b5","tenant":"e2e-shared-a-328ef1","userId":"a57fe096-7c8a-458a-9209-dd484656490a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-3323b5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3323b5","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3323b5"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a57fe096-7c8a-458a-9209-dd484656490a","keyName":"e2e-rate-a-3323b5","selected_subscription":"e2e-rate-iso-a-3323b5","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-3323b5@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3323b5","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d51e1a5b-0fa0-4d11-8b65-3456aba4ffef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52576","PortSpecifier":{"PortValue":52576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52576","PortSpecifier":{"PortValue":52576}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198314,"nanos":695084086},"http":{"id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7RJncZhc0Tg0Z53m_2y9GnxYHUDs11LpMCWNve3NKu0OtftMTlNVztwtFnQg"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7RJncZhc0Tg0Z53m_2y9GnxYHUDs11LpMCWNve3NKu0OtftMTlNVztwtFnQg\"}"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a57fe096-7c8a-458a-9209-dd484656490a","keyName":"e2e-rate-a-3323b5","subscription":"e2e-rate-iso-a-3323b5","tenant":"e2e-shared-a-328ef1","userId":"a57fe096-7c8a-458a-9209-dd484656490a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-3323b5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3323b5","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3323b5"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a57fe096-7c8a-458a-9209-dd484656490a","keyName":"e2e-rate-a-3323b5","selected_subscription":"e2e-rate-iso-a-3323b5","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-3323b5@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3323b5","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f04d1cb1-84aa-4ce3-85e2-c9dc163cf4d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50398","PortSpecifier":{"PortValue":50398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50398","PortSpecifier":{"PortValue":50398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198333,"nanos":945547626},"http":{"id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eee92e3-783a-4a00-9f89-e52cb5bbec47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b138872-a500-477c-8ad9-d7814e70be90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41472","PortSpecifier":{"PortValue":41472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b138872-a500-477c-8ad9-d7814e70be90","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b138872-a500-477c-8ad9-d7814e70be90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:41472","PortSpecifier":{"PortValue":41472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198333,"nanos":983152416},"http":{"id":"0b138872-a500-477c-8ad9-d7814e70be90","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b138872-a500-477c-8ad9-d7814e70be90","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b138872-a500-477c-8ad9-d7814e70be90","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b138872-a500-477c-8ad9-d7814e70be90","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b138872-a500-477c-8ad9-d7814e70be90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b138872-a500-477c-8ad9-d7814e70be90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50406","PortSpecifier":{"PortValue":50406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50406","PortSpecifier":{"PortValue":50406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198334,"nanos":16374048},"http":{"id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a560aa9-ce74-4673-aef5-5ab03a429e83","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50412","PortSpecifier":{"PortValue":50412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96d5acc8-a24f-4a41-965d-0889132a323f","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50412","PortSpecifier":{"PortValue":50412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198335,"nanos":60825085},"http":{"id":"96d5acc8-a24f-4a41-965d-0889132a323f","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d5acc8-a24f-4a41-965d-0889132a323f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50422","PortSpecifier":{"PortValue":50422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93625c47-03a1-4867-94ae-2ea9090253d8","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50422","PortSpecifier":{"PortValue":50422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198336,"nanos":104290550},"http":{"id":"93625c47-03a1-4867-94ae-2ea9090253d8","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93625c47-03a1-4867-94ae-2ea9090253d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50438","PortSpecifier":{"PortValue":50438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb454838-1da9-4f5c-9200-17f0667c4adf","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:50438","PortSpecifier":{"PortValue":50438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198337,"nanos":142487168},"http":{"id":"eb454838-1da9-4f5c-9200-17f0667c4adf","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb454838-1da9-4f5c-9200-17f0667c4adf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54654","PortSpecifier":{"PortValue":54654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54654","PortSpecifier":{"PortValue":54654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198338,"nanos":186569579},"http":{"id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5a50dd9-6e86-42f5-829e-20c149f772aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54668","PortSpecifier":{"PortValue":54668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54668","PortSpecifier":{"PortValue":54668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198339,"nanos":225484331},"http":{"id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1373afe6-e850-4676-ad32-ebfafbbbfb0c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54678","PortSpecifier":{"PortValue":54678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54678","PortSpecifier":{"PortValue":54678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198340,"nanos":265924051},"http":{"id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d63952-9cec-4cb4-8978-8b3e4a9eb595","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54682","PortSpecifier":{"PortValue":54682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","method":"POST","path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions","host":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:54682","PortSpecifier":{"PortValue":54682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198341,"nanos":303589823},"http":{"id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","method":"POST","headers":{":authority":"e2e-shared-a-328ef1.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6TocLW4wuGxGkSdh_wlIaJwDSUj7p9G43GaSlQV1zuYAobyCCzjOTfgTBZ84\"}"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","subscription":"e2e-rate-iso-a-9fd842","tenant":"e2e-shared-a-328ef1","userId":"4bf04f49-f4b5-4302-86c4-905545c533f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\",\"requestedSubscription\":\"e2e-rate-iso-a-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-328ef1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4bf04f49-f4b5-4302-86c4-905545c533f6","keyName":"e2e-rate-a-9fd842","selected_subscription":"e2e-rate-iso-a-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-a-328ef1/e2e-rate-iso-a-9fd842@ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-328ef1/models/facebook/opt-125m","name":"rate-test-model-328ef1","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9fd842","namespace":"ai-tenant-e2e-shared-a-328ef1","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-328ef1/rate-test-model-328ef1"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ff5ce9e-1b29-4547-bca8-a9cc571a973b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47780","PortSpecifier":{"PortValue":47780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","method":"POST","path":"/ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a/v1/completions","host":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47780","PortSpecifier":{"PortValue":47780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198341,"nanos":348942512},"http":{"id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","method":"POST","headers":{":authority":"e2e-shared-b-6e175a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HF7xL2rsAxAMICnl_7KjTIr1rezIt8ndlUISAWuLxI6pJVUMJyOUmDojj91m"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HF7xL2rsAxAMICnl_7KjTIr1rezIt8ndlUISAWuLxI6pJVUMJyOUmDojj91m\"}"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b05df403-7dba-4ab2-bbce-20b912951b7f","keyName":"e2e-rate-b-9fd842","subscription":"e2e-rate-iso-b-9fd842","tenant":"e2e-shared-b-6e175a","userId":"b05df403-7dba-4ab2-bbce-20b912951b7f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a\",\"requestedSubscription\":\"e2e-rate-iso-b-9fd842\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6e175a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m","name":"rate-test-model-6e175a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9fd842","namespace":"ai-tenant-e2e-shared-b-6e175a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a"}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9fd842"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b05df403-7dba-4ab2-bbce-20b912951b7f","keyName":"e2e-rate-b-9fd842","selected_subscription":"e2e-rate-iso-b-9fd842","selected_subscription_key":"ai-tenant-e2e-shared-b-6e175a/e2e-rate-iso-b-9fd842@ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-6e175a/models/facebook/opt-125m","name":"rate-test-model-6e175a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9fd842","namespace":"ai-tenant-e2e-shared-b-6e175a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-6e175a/rate-test-model-6e175a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"633dfcd0-3922-4701-b312-7d7c1a91a1c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2395f60a953427af8e1bc40e3515be5cb15a15536e75584c5fad9542be2e8268"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75db2acf88b5890097fccdeb411aed4829f2f5e130a74f8f78db19f716ad298f"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60d35aa96eafc70e0055d29d7dee387f209c0bb2e0291857d86867b2691c255a"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46a8bc4db16d683fa2ce66ea99a969791038841ad369e6903783f51f25299bce"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc540bac2c04386852237b0f787162376bfdf7581c4f7c783d80d4a1ab10df57"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a7606feac9870f38443534593796d47d059aa7eaef5362038c0d21b73f482ba"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a496c2e859f898951090b93695c0eeb58d24d2159eb4bdbb596178c9a76b386e"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcf86cc6da275b819212ece1c97ec9f305ded7a92de75e9ea3032faca1f14762"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0056c1a0791cddd7151cc42770fa1149bc2c5d2c6e50aeb197a5dc4978a0767f"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4135def1664b41f19512949c4dd9dc8a8ff03d22f35f03422f68346886bd832c"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e41013a9a65194770b1765682afb7e3e54a0fd6b2bdc764085e627b4233beab2"}
{"level":"info","ts":"2026-07-28T00:25:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/560ee7266c0e6acc18f137c577fb0d40b032b9fee10285506138c763a5cb08ca"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd45accca39aab0a28cd755d50aaf1047dda38233f80e73e40bbcb2739cfa770"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c17e8195a13eb5f060d9ea517129a33053f2ad2d9eb708d2619b3ee66b49535d"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/827622361627e81308389adfe4d9f1f7cea2559d5cbef6593a378b2fc32619c6"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/303c5f46bef56e84f00cbc203e48d582f62c53fbbcc0ec4d66d88df43466ef19"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/728a18f6727845ffe36516eff2be5fadbfa0f92c150979d3baaab4bf25fe66d8"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61c7eca1c50a1019c079c99594f6ecc5fc2dd13fe71813193c5f1aa84c602738"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96fd38f71e644a9464f169cf5290c7017cab60bf0efd0f887f622756df042333"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2fc9da14afdf6e7daf780ca20dcdfcc235f8f0093f384f837ce1e1145e297fe"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f932a54f1ae3e6cd2ecd2f3d1638054a2b876c0edd101b12253e08fb2e83f53"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5c2a694c80a3d770c60e185c7f8dba6823053e111c14f677bb80ae459270cde"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b640db3fa51b99325612fe56eb22120f0b45833697c52f240764c85de2ff2a73"}
{"level":"info","ts":"2026-07-28T00:25:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce3da6562095655fa6a1696a605f4ebb73b293d3a5937964b79a391de2d5948"}
{"level":"info","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53894","PortSpecifier":{"PortValue":53894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53894","PortSpecifier":{"PortValue":53894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198405,"nanos":110354091},"http":{"id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","method":"POST","headers":{":authority":"maas.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2792784-c7e8-4b0c-ba98-1e633d6aa0b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53898","PortSpecifier":{"PortValue":53898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"338d2562-9100-48e2-ac3b-72f8cdac6086","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53898","PortSpecifier":{"PortValue":53898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198405,"nanos":167836951},"http":{"id":"338d2562-9100-48e2-ac3b-72f8cdac6086","method":"POST","headers":{":authority":"maas.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nRMzdRosWDec4tbP_A6GtsRU3AOzNJBoPiGRyLxchHMfBSOdLnhErPumdOv8"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nRMzdRosWDec4tbP_A6GtsRU3AOzNJBoPiGRyLxchHMfBSOdLnhErPumdOv8\"}"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e1d71a7-421f-4f0a-a374-2d80331f9c9e","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"5e1d71a7-421f-4f0a-a374-2d80331f9c9e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5e1d71a7-421f-4f0a-a374-2d80331f9c9e","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:26:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"338d2562-9100-48e2-ac3b-72f8cdac6086","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2"}
{"level":"error","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949"}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949"}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949"}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017"}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017"}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"}
{"level":"error","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-28T00:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"}
{"level":"info","ts":"2026-07-28T00:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa"}
{"level":"info","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee470860-2477-4ba8-b30a-91beede71732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47084","PortSpecifier":{"PortValue":47084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee470860-2477-4ba8-b30a-91beede71732","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-74721a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee470860-2477-4ba8-b30a-91beede71732","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47084","PortSpecifier":{"PortValue":47084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198460,"nanos":426935284},"http":{"id":"ee470860-2477-4ba8-b30a-91beede71732","method":"POST","headers":{":authority":"e2e-ipp-a-74721a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee470860-2477-4ba8-b30a-91beede71732","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"]}}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee470860-2477-4ba8-b30a-91beede71732","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/162e45941c70"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=ac1bf6b3-1074-4597-a671-32089a71fe68"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f9d7f23f-32ca-4538-885d-5aa75ccad317","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-74721a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-74721a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee470860-2477-4ba8-b30a-91beede71732","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee470860-2477-4ba8-b30a-91beede71732","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:27:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee470860-2477-4ba8-b30a-91beede71732","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f64c2158-c8e3-442f-a42f-e60497ef709e","method":"POST","path":"/ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a/v1/chat/completions","host":"e2e-ipp-a-74721a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785198462,"nanos":501539509},"http":{"id":"f64c2158-c8e3-442f-a42f-e60497ef709e","method":"POST","headers":{":authority":"e2e-ipp-a-74721a.apps.e05eeaa2-7b56-4c28-a8df-162e45941c70.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p88HvAIarFxgaLJp_TXmZtdMOnDzSMJbcxrQ7OdrqB0dyDlDPmvm5EK0WMq1"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-74721a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p88HvAIarFxgaLJp_TXmZtdMOnDzSMJbcxrQ7OdrqB0dyDlDPmvm5EK0WMq1\"}"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-74721a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"594a3e07-bbff-432d-84f9-0b26f04dc2b0","keyName":"e2e-ipp-74721a","subscription":"ipp-route-74721a-sub","tenant":"e2e-ipp-a-74721a","userId":"594a3e07-bbff-432d-84f9-0b26f04dc2b0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-74721a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a\",\"requestedSubscription\":\"ipp-route-74721a-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-74721a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-74721a/models/facebook/opt-125m","name":"ipp-route-74721a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-74721a-sub","namespace":"ai-tenant-e2e-ipp-a-74721a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a"}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-74721a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-74721a-sub"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"594a3e07-bbff-432d-84f9-0b26f04dc2b0","keyName":"e2e-ipp-74721a","selected_subscription":"ipp-route-74721a-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a-sub@ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-74721a/models/facebook/opt-125m","name":"ipp-route-74721a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-74721a-sub","namespace":"ai-tenant-e2e-ipp-a-74721a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-74721a/ipp-route-74721a"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-28T00:27:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f64c2158-c8e3-442f-a42f-e60497ef709e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-28T00:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/509e7f4b38aad5ab58d2c2634e8e6ffe310fdc4f52c8972d5e12429b96801146"}
{"level":"info","ts":"2026-07-28T00:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81cbae7834337c342856e36963aaaf3ffa4bf45951af89db77bc9a4cd8aa4564"}
{"level":"info","ts":"2026-07-28T00:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0f77829d597a550f30847d5ed17baaa0ad0da88d1a11bde7dbd5fcee202a976"}
{"level":"info","ts":"2026-07-28T00:28:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b833cf883cdbee378be2dae14a78fbd2eedec48c97666daeaf4fd2ac18add1"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8964b6b710705dec71229c975d699c0038216416ee8dfd8968d79fd07dd03d2"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ff94dcb7b8817e99a20069a8faaa53f5aae11d3b1703f3a7f2dee383e00a769"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c000117fe2485bb6d5d659cc919272f5b800abe700a16aa981bf9c5ee0279949"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/053335dad976aa79b23d930e0511a6651a79276e6b2a0a95a92add5a9c14312b"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/761675e7ed81e205f0d2421581524a73ef7685569997f03bae752df609626186"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0938324fab2d036aba66acd18d51e6297413259bbf3eefc75dc938d1cc426b6"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3cda189d3e6578dffd705397b8f7436ab983556ff5f1fc24e27e085693593fa"}
{"level":"info","ts":"2026-07-28T00:28:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49faa9965cbf140b362d681bcbff304a3cb93886fcc784c1394b20365fd37017"}